Analyst Jobs

About The Position

Requirements

• Working knowledge of cybersecurity principles, information assurance, security operations, vulnerability management, and security risk assessment.
• Experience supporting Risk Management Framework (RMF) activities, security controls assessment/validation, and cybersecurity compliance.
• Experience using Security Information and Event Management (SIEM) technologies in a security operations or information security environment.
• Ability to perform vulnerability and risk analysis and support development and management of POA&Ms and remediation activities.
• Basic knowledge of Active Directory, UNIX, Windows, and relational database environments.
• Knowledge of security policies, procedures, controls, and technical safeguards for hardware, firmware, software, applications, and networks.
• Experience with functional and systems analysis and the ability to evaluate technical security issues and recommend practical solutions.
• Strong analytical, problem-solving, organizational, written, and verbal communication skills.
• Ability to collaborate effectively with cybersecurity personnel, system owners, technical teams, auditors, and Government/client stakeholders
• Bachelor's or associate degree in Computer Science, Math, Information Technology, Engineering, or a related field, or at minimum an IT certification. Two (2) years of relevant experience may substitute for one (1) year of education.
• Minimum of two (2) years of experience in information security as an analyst or in security operations.
• Minimum of two (2) years of experience with Security Information and Event Management (SIEM).
• Minimum of two (2) years of experience supporting Risk Management Framework (RMF) activities.
• Basic knowledge of Active Directory, UNIX, Windows, and relational databases.
• US Citizenship required
• Active SECRET clearance required

Nice To Haves

• CompTIA Security+ or equivalent cybersecurity certification.
• CompTIA CySA+ (Cybersecurity Analyst) or equivalent cybersecurity analyst certification.
• ISC2 Certified in Cybersecurity (CC) or Systems Security Certified Practitioner (SSCP).
• GIAC Security Essentials (GSEC), GIAC Certified Incident Handler (GCIH), or other relevant GIAC certification.
• Certified Authorization Professional (CAP) / ISC2 Certified in Governance, Risk and Compliance (CGRC), or other relevant RMF/GRC certification.
• Splunk Core Certified Power User, Splunk Enterprise Security Certified Admin, or another certification relevant to the candidate's SIEM platform experience.

Responsibilities

• Plan, implement, upgrade, monitor, and support security measures designed to protect computer networks, systems, applications, digital files, and electronic infrastructure.
• Evaluate and validate technical processes supporting authorization and assessment activities to ensure systems meet organizational cybersecurity requirements.
• Perform Risk Management Framework (RMF) activities for information systems, including systems operating in Government cloud environments.
• Assess cybersecurity risks across systems, applications, and processes against applicable security control frameworks, regulations, policies, and requirements.
• Assist the Security Controls Auditor with security control validation and RMF activities.
• Perform vulnerability and risk analyses of computer systems and applications throughout all phases of the system development life cycle.
• Analyze vulnerability management activities, recommend remediation solutions, and develop and maintain Plans of Action and Milestones (POA&Ms).
• Use Security Information and Event Management (SIEM) capabilities to support security monitoring, analysis, and identification of potential cybersecurity events and violations.
• Identify, report, track, and support the resolution of cybersecurity violations, vulnerabilities, security incidents, and other information assurance concerns.
• Recommend information assurance and cybersecurity solutions that support customer and system security requirements.
• Support the design, engineering, integration, and implementation of computer system security solutions.
• Evaluate, test, monitor, and maintain information security policies, procedures, and security-related hardware, firmware, and software.
• Ensure risk analyses are consistent with applicable regulations and policies and support internal and external compliance requirements.
• Provide functional and systems analysis and technical support to resolve information assurance and cybersecurity-related issues.
• Develop cybersecurity training, processes, procedures, plans, and documentation to support system transitions and ongoing operations.
• Prepare correspondence, reports, white papers, meeting minutes, spreadsheets, briefs, communications products, and other cybersecurity documentation as required.
• Identify and develop methods, plans, and documentation to streamline operating procedures, improve security operations, and support long-range program and project planning.