Cyber Security Analyst

Department: Data Analysis and Technology Services

Employment Type: Full Time

Location: Chantilly, Virginia, Chantilly, VA

Key Responsibilities

• Real-time prevention, detection, and remediation of cyberattacks on internet-facing systems (significant and current).
• Either offensive (e.g., penetration testing, red teaming, ethical hacking) or defensive (e.g., security operations, incident response, threat hunting) cyber operations.
• Proficiency) in scripting languages (e.g., Python, PowerShell, Bash) for automation and analysis.
• Security information and event management (SIEM) systems (e.g., Splunk, QRadar, Elastic Stack)
• AWS cloud logging such as CloudTrail and CloudWatch.
• Network protocols, packet capture analysis, and netflow analysis.
• Security event log analysis, including Windows event logging and Syslog.
• Understanding of network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure, GCP).
• Various attack vectors, exploitation techniques, and defensive countermeasures.
• Authority and Accreditation (A&A) packages needed to obtain security approvals for system deployments into production state.
• Reviewing assessment reports and assist projects in identifying security risks, including technical and non-technical, and developing effective mitigation strategies, including Plan of Action and Milestones (POA&Ms).
• Assuring system components and software applications adhere to continuous monitoring and compliance with Security accesses and controls.
• Reviewing and authoring System Security Plans (SSP), security requirements, and other supporting documentation for the A&A process.
• Writing and reviewing NIST 800-53 controls. 
• Running and interpreting Rapid7 scans.
• Working with Amazon Cloud security.
• Data visualizations tools (e.g. Tableau) to support development of visual dashboards to assist stakeholders with overwatch/monitoring of systems.
• Working effectively independently and as part of a team in a fast-paced environment.

Highly Desired Qualifications

• Knowledge of information security standards such as ISO 27001 and NIST
• Ability to design, implement and maintain IDS/IPS technologies (Intrusion Detection System/lntrusion Prevention System). 
• Using common offensive security tools and methodologies (e.g., Metasploit, Nmap, Burp Suite, Cobalt Strike)
• Processing software applications through the Sponsor's approving channels to operate within the Sponsor's Cloud offerings 
• Working in a Customer-facing environment
• Exceptional analytical and problem-solving skills with the ability to dissect complex technical issues and propose effective solutions.

What We Offer You

• Highly Competitive Salary: Recognizing and rewarding your expertise and contributions.
• Generous Paid Time Off: Providing ample time for rest, relaxation, and personal pursuits.
• Dedicated Training Budget: Supporting continuous learning and professional development.
• 100% Employer-Covered Family Vision, Dental, and Health Insurance: Ensuring comprehensive health coverage for you and your family.
• 100% Employer-Covered Life and Disability Insurance: Offering financial security and peace of mind.
• 401(k) Plan with a 6% Employer Match: Helping you plan and save for a secure retirement, with 100% vesting from day one.
• 11 Paid Government Holidays: Observing national holidays to ensure time off with family and friends.
• Spot Bonuses for Exceptional Performance: Rewarding outstanding contributions and achievements.