Endpoint Security Analyst - Tier 1

Summary

A junior-level security analyst reviews logs, tunes security tools, and enforces endpoint security policies for a government-affiliated organization, primarily using Windows and mobile security technologies.

Role/Office Location Options:
Washington, D.C.

Requirements:
Must be a US citizen to be eligible to apply for this position.
Must be able to obtain secret clearance to be eligible to apply for this position.

Job Description:
Cybersecurity is looking to procure a qualified junior level Contractor(s) to provide security operations
support. Tasks include:

  • The ability to review event logs, develop standardized queries, collaborate with colleagues to develop handling instructions/standard operating procedures, perform cross-training, tune and perform continuous improvement, and maintain these queries throughout their lifecycle.
  • The ability to handle quality assurance on events and escalations, including performing triage and root cause analysis on security events.
  • Review existing security events and lead in the research and development of refinements and mitigations as necessary.
  • Subject Matter Expert (SME) on one or more of the following: Mobile Security, Vulnerability Management, Patch Management, Windows GPOs
  • Has the ability to communicate with and assist member offices in developing and deploying secure configuration settings and practices – and developing automated mechanisms to change and enforce configuration settings.
  • Has the ability to work with groups both inside and outside of Cybersecurity to identify, determine feasibility, prioritize, track and resolve findings (configuration settings/software updates/etc.) to improve the security of the House.
  • Serve as a trusted resource in providing technical responses and guidance on technical and procedural security features of a system.
  • The ability to contribute to Cybersecurity project plans providing timely updates.
  • The ability to communicate the status of the House endpoint security, to include developing, executing, documenting, and training repeatable organizational metrics.