Cybersecurity Analyst

Responsibilties

The Cybersecurity Analyst is responsible for researching and enforcing technical cybersecurity compliance within the organizations systems. They investigate the detailed system attributes of encryption, vulnerability management, multi-factor authentication, and centralized logging and auditing, among other disciplines. The appropriate candidate must have detailed knowledge of the federal standards and technologies used to carry out the required disciplines and will provide technical summaries and input on the data.
Works with multiple levels of Security Assessment Teams to perform detailed analysis and identify noncompliant systems and possible vulnerabilities.
Assist in providing methods to remediating shortcomings to stakeholders both internal and external for affected systems.
Conduct in-depth technical analysis, confirming compliance information and maintaining a detailed record of all actions taken, evidence and communications.
Assist in interpretation and implementation of Federal Government requirements systems when necessary and coordinate various audits and data calls as appropriate
Analyze logs to determine anomalous traffic and potential exfiltrated data.
Maintains working knowledge of current vulnerabilities of systems and how they can be exploited.
Interprets guidance and technical requirements for implementation security requirements to prevent security breaches from happening and disseminates the guidance in a more readable format to others.
Ensures that current Federal Government security policies are being followed to the extent they able to and all required documentation is provided.
Responds to incidents when required to assist in detection, isolation, remediation, and investigation of the incident.
Participate in After Action Reviews (AARs) of incident responses
Assists with vulnerability management notifications from internal sources as well as vendors to ensure that required vulnerabilities are remedied within the required timeline and reported accurately within that timeline.
Produces, analyzes, and interprets forensically sound images of data and other electronic storage media when required or requested.

Qualifications

• A minimum of 8 years of experience enforcing technical Cybersecurity compliance, experience investigating system attributes for encryption, vulnerability management and centralized logging and auditing within federal standards
• Experience providing technical summaries, with recommendations to leadership
• Previous experience working with multi-layered assessment teams and providing methods of remediation and audits to ensure in-depth technical analysis, confirming compliance information and maintaining a detailed record of all actions taken, evidence and communications.
• Deep understanding and the ability to analyze threat intelligence data to identify emerging threats and proactively defend against them.
• Previous experience ensuring Federal Government security policies are being followed to the extent they able to and all required documentation is provided
• Understanding of how to particpate in After Action Reviews and the ability to produce, analyze and interpret forensically sound images of data and other electronic storage media when required or requested.
• Certifications preferred: CompTIA CySA+, CompTIA CASP+, CompTIA PenTest+, CompTIA SecurityX, EC-Council Certified Ethical Hacker (C|EH), EC-Council Certified Incident Handler (C|IH), GIAC GPEN, GIAC GCIH)
• Ability to work on site in Washington DC five days a week
• An active Top Secret Clearance