Security Operations Analyst III

Ardent Eagle Solutions•Arlington, VA

1d•Hybrid

About The Position

The National Indian Gaming Commission (NIGC) is an independent federal agency within the Department of the Interior (DOI), established by Congress through the Indian Gaming Regulatory Act of 1988 (IGRA). The NIGC's mission is to promote tribal economic development, self-sufficiency, and strong tribal governments; maintain the integrity of the Indian gaming industry; and ensure that Tribes are the primary beneficiaries of their gaming activities. IGRA provides a legal framework structured to safeguard tribes as the primary beneficiaries of their gaming operations, shield Indian gaming from corrupting influences, and ensure that the games offered are fair and honest. The NIGC was created to protect tribal gaming as a means of generating revenue for tribal governance and tribal communities.

Requirements

A minimum of six (6) years of continuous experience.
Relevant IT certifications may be substituted for a formal college degree; however, demonstrated hands-on experience in performing the required tasks is mandatory and may not be substituted.
Selected candidates may undergo a government security investigation and must fulfill eligibility criteria for accessing classified information.
US citizenship may be a prerequisite for certain roles.

Responsibilities

Perform all security analysis activities according to established standards.
Maintain threat awareness and monitor NIGC information systems for exploits and any suspicious activities; analyze aggregated logs and reports from security tools.
Develop a daily security analysis and reporting checklist and execute activities identified in the checklist.
Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.
Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.
Develop detection and response configuration policies to increase automation and alerting.
Develop Incident handling procedures.
Execute Incident Response activities to include all associated actions according to the NIGC incident response plan.
Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.
Collect security operations performance and NIGC security posture management metrics and prepare NIGC threat reports to inform risk management decisions.