Vulnerability Management / Cyber Operations Analyst

Creates cyber-intelligence tools / methods and performs research and analysis in order to mitigate and eliminate data and cyber security risks. Designs and develops acceptance criteria for cybersecurity architecture.

• Understanding of network protocols, operating systems (Windows, Linux), and security tools like SIEM (Security Information and Event Management).
• Ability to review complex data logs and trace the "blast radius" of a security threat.
• Quick troubleshooting when a breach or system failure occurs.
• Explaining technical risks and security guidelines clearly to non-technical staff and management.
• Involved in the periodic conduct of a review of each system’s audits and monitors corrective actions until all actions are closed.
• Responsible for running vulnerability scans, analyzing/validating security vulnerabilities, prioritizing risks (per BOD guidance), coordinate remediation with Infrastructure and Application Teams, verify remediation/closure, document false positives/manage risk acceptances, coordinate vulnerability reporting.
• Monitor network traffic, system/audit logs, and security alerts for suspicious activity.
• Investigate suspected and confirmed security breaches, find the root cause, and stop active attacks.
• Support threat analysis, and digital forensic activities.
• Support latest cyber initiatives/requirements related to audit logging requirements, zero trust architecture, encryption, etc.
• Document security events, write incident reports, and recommend upgrades to management.
• Create security standards and best practices for employees.

Minimum Qualifications

• Bachelor’s Degree in Computer Science or a related field or equivalent experience.
• 5-10 years of experience in systems security.
• Security Certifications: Security+, CEH, CISSP, other application vendor certs

Other Job Specific Skills

• Scripting skills to integrate with security tools/dashboard governance and policy processes and documentation, Knowledge of Federal Cyber Security policy/guidance including OMB, Executive Orders, and NIST 800 Series.
• Need to be familiar with Security Center Nessus scanners.
• Excellent attention to detail.
• Must be able to balance multiple tasks simultaneously.
• Advanced knowledge of encryption, vulnerability assessment, penetration testing, cyber forensics, intrusion detection, and incident response and remediation.