Endpoint Security Analyst - Tier 1
Summary
A junior-level security analyst reviews logs, tunes security tools, and enforces endpoint security policies for a government-affiliated organization, primarily using Windows and mobile security technologies.
Role/Office Location Options:
Washington, D.C.
Requirements:
Must be a US citizen to be eligible to apply for this position.
Must be able to obtain secret clearance to be eligible to apply for this position.
Job Description:
Cybersecurity is looking to procure a qualified junior level Contractor(s) to provide security operations
support. Tasks include:
- The ability to review event logs, develop standardized queries, collaborate with colleagues to develop handling instructions/standard operating procedures, perform cross-training, tune and perform continuous improvement, and maintain these queries throughout their lifecycle.
- The ability to handle quality assurance on events and escalations, including performing triage and root cause analysis on security events.
- Review existing security events and lead in the research and development of refinements and mitigations as necessary.
- Subject Matter Expert (SME) on one or more of the following: Mobile Security, Vulnerability Management, Patch Management, Windows GPOs
- Has the ability to communicate with and assist member offices in developing and deploying secure configuration settings and practices – and developing automated mechanisms to change and enforce configuration settings.
- Has the ability to work with groups both inside and outside of Cybersecurity to identify, determine feasibility, prioritize, track and resolve findings (configuration settings/software updates/etc.) to improve the security of the House.
- Serve as a trusted resource in providing technical responses and guidance on technical and procedural security features of a system.
- The ability to contribute to Cybersecurity project plans providing timely updates.
- The ability to communicate the status of the House endpoint security, to include developing, executing, documenting, and training repeatable organizational metrics.