Cyber Security Analyst
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US

THE OPPORTUNITY:

Our client is seeking a Cyber Security Analyst that will join the Cyber Security Incident Response Team on the DCGS Management Center (DMC) program located at Langley AFB that is highly motivated with a strong system administration background. The ideal candidate will be adept in both Windows and Linux environments, possess hands-on experience with ELK/Elastic Stack for threat detection and analysis, and demonstrate the ability to follow established Incident Response (IR) process with minimal supervision. The successful candidate will perform the following responsibilities onsite:

• Lead and assist in incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned) to ensure the confidentiality, integrity, and availability of the OA DCGS weapon system.
• Utilize ELK/Elastic Stack to perform log analysis, threat detection, and investigations; Create and maintain security incident reports and dashboards.
• Escalate and document internal/external security incidents through appropriate ticketing and reporting processing
• Design, implement, and maintain cybersecurity SOPs and incident playbooks
• Maintain documentation of IR processes and case notes; Ensure security testing and evaluations are completed and properly documented.
• Support proactive threat hunting and vulnerability assessments
• Analyze and correlate logs from varied data sources to identify patterns and anomalies
• Understand network protocols and establish baselines to identify abnormal activity
• Perform cyber threat analysis and reporting on information from both internal and external sources and appropriately apply gathered cyber threat intelligence to defending the enterprise network.
• Apply knowledge of Zero-Day vulnerabilities and CVEs to incident handling and remediation
• Collaborate with cross-functional teams and external stakeholders as needed
• Provide guidance for securing information systems and support cyber vulnerability penetration assessments.
• Operate independently during shifts and respond to security alerts with urgency