Cybersecurity Analyst Jobs

About The Position

Requirements

• Cybersecurity Defense & Analysis
• Incident Response
• Threat Analysis
• Exploitation Analysis
• Cyber Investigations
• Identity and Access Management operations
• Use of Cyber tools
• Utilizes COTS/GOTS applications
• ticketing systems
• lab systems
• forensic applications
• custom tools, techniques, and procedures (TTPs)
• Maintains chain of custody on items of evidentiary value.

Responsibilities

• Performs Cybersecurity Defense & Analysis, Incident Response, Threat Analysis, Exploitation Analysis and Cyber Investigations from the National Initiative for Cybersecurity Education (NICE) Framework.
• Work is typically performed in a Security Operations Center (SOC), Network Operations & Security Center (NOSC), Joint Operations Center (JOC), or similar, and can be categorized as primarily Incident Investigation and Response, Security Operations, Incident Management, or similar.
• Duties may include Identity and Access Management operations, or the use of Cyber tools to perform cyber work.
• Utilizes COTS/GOTS applications, ticketing systems, lab systems, forensic applications and/or custom tools, techniques, and procedures (TTPs) to monitor systems for abnormal events.
• Determines if events are to be deemed an incident.
• Determines if incidents are due to malicious or nefarious actions by one or more threat actors.
• Utilizes threat intelligence to determine if the incident is part of a named campaign in order to determine appropriate levels of response, or provide new intelligence based on investigative actions to threat intelligence teams, organizations, and/or external parties.
• Obtains information and evidence to be utilized in legal proceedings or to provide to government counterparts for possible military, law enforcement, and/or counter-intelligence response actions/activities, Human Resources investigations, and/or management action.
• Works with system owners to restore affected systems to secure baseline configurations.
• Maintains chain of custody on items of evidentiary value.
• Works with legal, HR, and other non-technical personnel to recommend formal proceedings against personnel.
• Researches, evaluates, and recommends new security tools, techniques, and technologies.
• Supports cyber metrics development, maintenance and reporting.
• Provides briefings to senior staff.