Cyber Threat Analyst

The Senior Monitoring Analyst supports a Civilian Agency Cyber Security Operations Center (SOC) organization protecting the network security of tens of thousands of users.

The Senior Monitoring Analyst responsibilities include:

• Support monitoring of all Information Assurance Devices (IADs) to identify and document all intrusions and attempted intrusions.
• Populate and maintain an intrusions database, and provide data analysis support; analyze data from sensors, network security devices and applications using the security information event management systems, log servers, application interfaces and device consoles provided.
• Document of evidence of system security compromise, generate of trend reports, and collect evidence of malicious or anomalous activity.
• Report security incidents and/or network intrusions to Incident Handlers for dissemination to appropriate DOT points of contacts.
• Identify anomalous and malicious activity.
• Contribute to content creation, prioritize, rank and escalated incidents.
• Provide support in the detection, response, mitigation, and reporting of cyber threats affecting client networks.
• Maintain an understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security operations.
• Assist in producing status reports and briefs to senior leadership; provide analysis for correlated information sources.
• Provide liaison to other agency cyber threat analysis entities such as intra-agency and inter- agency Cyber Threat Working Groups.
• Maintaining proficiency in the use and production of visualization charts, link analysis diagrams, and database queries.
• Analyze and report cyber threats as well as assist in deterring, identifying, monitoring, investigating and analyzing computer network intrusions.
• Senior Monitoring Analysts must provide recommendations based on best practice and experience to develop processes that will enhance efficiencies needed to perform the above.
• Any other duties as requested by the Contracting Officer Representative and SOC management.

Qualities/Additional info:  At the direction of the COR, the Contractor may be required to move personnel shifts in order to support demanding workloads, especially during core business hours.  Senior Monitoring Analysts should be proven team players with excellent oral and written communications skills. Senior Monitoring Analysts should also be a self-starter, capable of working projects cradle-to- grave, independently if necessary. Frequent interaction with government client is required.

Job Qualifications:

Required Education and Experience:

Education:

• Bachelor's degree
• OR
• Minimum ten (10) years of relevant professional experience.

Experience:

• In addition to required education or equivalent experience;
• Minimum six (6) years IT experience AND
• Must have four (4) years experience network security analysis, using intrusion detection systems.
• Must have experience conducting analysis at the packet level.

Preferred Experience:

• Firewall administration experience.
• Experience with intrusion detection sensors.
• Experience with Security Information and Event Management Tools (ArcSight).
• CISSP and/or SANS/GIAC Certification (equivalent to two year experience).

Level of Clearance Required: Department of Defense Secret

US Citizenship Required:      Yes