Security Operations Analyst

NFF Inc

22h

About The Position

NFF Inc. is seeking a senior security analysis who will perform activities with minimal supervision and guidance. The role involves performing all security analysis activities according to established standards, maintaining threat awareness, and monitoring information systems for exploits and suspicious activities by analyzing aggregated logs and reports from security tools. The analyst will develop and execute daily security analysis and reporting checklists, evaluate the effectiveness of security analysis activities against best practices, and recommend improvements. Key aspects include adhering to Continuous Monitoring practices to assess security control effectiveness, executing proactive threat hunting, developing detection and response configuration policies for automation and alerting, and creating incident handling procedures. The position also requires executing Incident Response activities, validating information capture from security tools for investigations, and collecting security operations performance and posture management metrics to prepare threat reports for risk management decisions.

Requirements

Bachelor's degree in Cybersecurity, Management of Information Technology, or a related field.
6-9 years of experience in information security or related roles.
Excellent communication and multi-tasking skills.
Proactive and ability to work both singularly and in a Team environment.
Knowledge with federal standards such as NIST, FISMA and FIPS.

Nice To Haves

ACTIVE PUBLIC TRUST CLEARANCE

Responsibilities

Perform all security analysis activities according to established standards.
Maintain threat awareness and monitor information systems for exploits and any suspicious activities; analyze aggregated logs and reports from security tools.
Develop a daily security analysis and reporting checklist and execute activities identified in the checklist.
Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.
Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of information systems.
Develop detection and response configuration policies to increase automation and alerting.
Develop Incident handling procedures.
Execute Incident Response activities to include all associated actions according to the incident response plan.
Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.
Collect security operations performance and security posture management metrics and prepare threat reports to inform risk management decisions.