Description of Job Duties/Responsibilities:

• Monitor security events from all the various sensors and agents, providing analysis and correlation and identify vulnerabilities
• Detect, triage, conduct initial investigation of security events, provide initial response, and completes reporting of security events
• Coordinate and respond to cybersecurity related events on all of the monitored network and the systems on those network
• Develop methods to provide best cyber defense capability
• Process and analyze cyber threat intelligence information
• Perform forensic analysis of digital information utilizing various tools such as SIEM to gather and analyze evidence, Identify, analyze, and interpret trends or patterns in complex data sets
• Perform network vulnerability analysis utilizing modeling tools and network forensic analysis utilizing flow and connection analysis tools
• Test new software to help protect the Sponsor’s data, and help users adhere to new regulations and process to ensure the network stay safe
• Design, test, and implement secure operating systems, network, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, and loss prevention
• Use critical thinking to find new ways to resolve issues
• Plan and carry out the security measures for an organization's network and servers
• Prevent cybersecurity breaches, and work quickly to secure data if a breach is detected

Qualifications

REQUIRED:

• Must have an active TS/SCI w/poly security clearance
• 1-5 years of Cyber Threat Analysis experience
• Experience working within a Security or Network Operations Center
• Experience working with Security incident and event management
  

PREFERRED:

• BS degree in Cybersecurity, Information Security, Information Technology, Computer Science/Engineering, Network Engineering, or Computer forensics
• Demonstrated proficiency with at least one of the following tools/techniques: ArcSight ESM, Splunk Enterprise, FireEye, SolarWinds, Remedy, and/or McAfee ePolicy
• Relevant Certifications: Security +, CySA+, CASP+, CEH, CISSP, GCIA, Splunk Certified User
• Demonstrated proficiency in Windows and Linux environments

Location: Chantilly, VA or McLean, VA