General Summary:
COLSA Corporation is hiring for a Cyber Operations Analyst. You will be responsible for performing system monitoring and analysis support for the detection of cyber incidents and provide recommendations on how to correct findings.
*Principal Duties and Responsibilities (Essential Functions):
- Monitors the network and supporting systems to detect security compromise events (including intrusions and virus incidents). *
- Provides standard support for processes, investigations and maintenance of system accreditation*
- Identifies where systems/networks deviate from acceptable configurations, enclave policy, or local policy.*
- Provides recommendations for protecting networks, workstations, servers, and IT assets.*
- Involved in conducting audits to ensure information systems security policies and procedures are implemented as defined in security plans and best practices. *
- Supports the formal testing requirements through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
- Involved in passive evaluations (compliance audits) and/or active evaluations (vulnerability assessments).
_At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits _
Required Skills
Required Experience
Required Qualifications
- Bachelor's degree or higher in a related field (minimum of 3 related certifications may be used in place of related academic field)
- Minimum of 2-4 years of related experience
- Active CompTIA Security+CE certification
- Strong written and verbal communication skills
- Ability to communicate and present information to customers at varying levels of technical detail
- Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities
- Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities
- Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making
- Familiar with encryption technology, penetration, and vulnerability analysis of various security technologies, and information technology security research
- US Citizenship Required; Ability to obtain interim Secret Clearance prior to start date;
Preferred Qualifications
- Active Secret clearance
- CySA+ or CEH certification
- Experience analyzing alerts using PCAPs and/or cloud logs, as well as an understanding of network threats, potential network exploitation, and methods to defend against potential malicious activity
- Proficiency in Office 365 tools at a professional level
- Experience using vulnerability scanning solutions such as Tenable Nessus
- Experience using data presentation/automation tools such as PowerBI or Tableau
- Experience assessing Security Technical Implementation Guide (STIG) findings
- Experience working with Endpoint Security Solutions such as Trellix or Microsoft Defender Endpoint
Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.