Cybersecurity Operations Center Analyst

Booz Allen Hamilton•Fort Belvoir, VA

About The Position

Cybersecurity Operations Center Analyst The Opportunity: As a Cybersecurity Operations Center Cyber Analyst on our security operations center team, you’ll improve tier monitoring strategies and analyze threats, using state-of-the-art tools and platforms. You’ll work with the team to comprehend, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You’ll manage efforts to figure out just how many systems are affected and assist recovery efforts. You’ll combine threat intelligence, event data, and assessments of events to identify patterns to understand attackers’ goals to stop them from succeeding. This is a great opportunity to continue to build your Cybersecurity skills with hands on experience in threat assessment and incident response. Join us as we protect clients from malicious actors. In this role, you’ll be counted on to understand cyberspace capabilities to evaluate potential weaknesses as well as the effectiveness of mitigations for cyber security solutions. You will leverage cyberspace operations systems to aggregate threat feeds that inform briefings for senior leadership aligned to our Army client. This is an opportunity to use your research and analysis abilities to adequately assess and inform operators and senior leadership and commanders on dynamic adversarial tactics, techniques, and procedures for our Security Operations Center data research. Your role will be vital in the development of operations plans to support command and control. If you want to be in the fight–working shoulder to shoulder with our mission partner–influencing the most critical global cyber missions, this is the opportunity for you. Join us. The world can’t wait.

Requirements

3+ years of experience working in a Security Operations Center at a classified level within the DoD
Experience providing continuous monitoring security expertise to business units and key stakeholders
Experience working with Cybersecurity staff to evolve the Security Operations continuous monitoring toolsets and reporting to provide better vulnerability insight
Ability to serve as subject matter expert on vulnerabilities, including system and application settings, and work alongside other security analysts in event handling and incident response
Ability to perform configuration and deployment of vulnerability scanning and network assessment tools, such as Splunk, Elastic, or Microsoft Sentinel
Ability to perform as a focal point for the incident response and be responsible for communicating with other stakeholders
TS/SCI clearance
Bachelor's degree
CSSP Analyst or Incident Responder Certification
DoD Approved 8140 Baseline Certification such as CFR, CCNA Cyber Ops, CCNA, cySA+, GCA, GCIH, GICS, Cloud+, or PenTest+

Nice To Haves

Experience using Elastic for monitoring and analysis
Experience with using endpoint tools to successfully hunt for adversarial behavior
Ability to conduct threat hunting using network and host-based information
TS/SCI clearance with a polygraph
Batchelor's degree in a STEM field

Responsibilities

Improve tier monitoring strategies
Analyze threats, using state-of-the-art tools and platforms
Comprehend, mitigate, and respond to threats quickly, restoring operations and limiting the impact
Manage efforts to figure out just how many systems are affected and assist recovery efforts
Combine threat intelligence, event data, and assessments of events to identify patterns to understand attackers’ goals to stop them from succeeding
Understand cyberspace capabilities to evaluate potential weaknesses as well as the effectiveness of mitigations for cyber security solutions
Leverage cyberspace operations systems to aggregate threat feeds that inform briefings for senior leadership aligned to our Army client
Assess and inform operators and senior leadership and commanders on dynamic adversarial tactics, techniques, and procedures for our Security Operations Center data research
Development of operations plans to support command and control