Risk Assessment & Compliance: Develop techniques and procedures for conducting cybersecurity risk assessments, compliance audits, and evaluating the impact of hardware, firmware, and software on system security.
Incident Investigation & Resolution: Investigate and resolve security incidents, including intrusions, frauds, cyberattacks, or data leaks, ensuring appropriate countermeasures are in place.
Data Correlation & Analysis: Correlate data feeds and logs to analyze known threats and incidents, build and refine event correlation rules, and develop analysis techniques to identify security incidents with specific sources (e.g., individuals, threat actors, systems, devices, IP addresses).
Threat Monitoring & Detection: Perform correlation activities and trend analysis to discover attack patterns, assess risks, and identify potential vulnerabilities in assets.
SOC Enablement: Implement and enhance security operations center (SOC) capabilities, including event correlation, incident response, and threat analysis.
Team Leadership & Guidance: Provide guidance and mentorship to junior cybersecurity staff, contributing to their professional growth and knowledge development.
Stakeholder Coordination: Ensure cybersecurity inspections, tests, assessments, and reviews are synchronized with all relevant stakeholders to maintain alignment and efficiency.
eMASS Administration: Assist in the implementation, management, and administration of the organization's structure and workflow within the eMASS (Enterprise Mission Assurance Support Service) framework.
Security Best Practices: Develop and enforce cybersecurity best practices, ensuring adherence to organizational security policies and regulatory compliance.
Project Management: Engage with stakeholders, manage timelines, and adapt to evolving requirements and new cybersecurity projects.
Training & Communication: Provide cybersecurity training sessions, deliver presentations, and facilitate clear communication across teams and leadership.
Documentation & Reporting: Maintain detailed documentation of security incidents, assessments, and compliance activities, providing clear and organized reports to leadership.
Continuous Learning & Adaptation: Stay updated on emerging cybersecurity threats, technologies, and practices, maintaining and upgrading relevant certifications.
Qualifications for Cybersecurity Analyst Role:
Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related technical discipline.
Equivalent combinations of education, technical certifications, or work experience are acceptable.
6+ years of demonstrated experience in cybersecurity, information assurance, or computer science.
Strong customer service experience and ability to interact with diverse stakeholders.
Relevant cybersecurity certifications such as CISSP, CISM, or CRISC are a plus.
Proficiency with ACTCS training systems and tools used for cybersecurity operations.
Strong analytical and decision-making skills, including troubleshooting, problem resolution, and process improvement.
Experience in developing security incident response strategies, correlation rules, and conducting security audits.
Ability to configure and manage security monitoring tools and technologies within a SOC environment.
Excellent communication, documentation, and organizational skills.
Strong teamwork and collaboration as a project team member.
Ability to present ideas clearly and provide training sessions as needed.
Dependability and adaptability to work under time constraints and evolving requirements.
Ability to maintain and upgrade certifications as needed.
Willingness to self-study and stay current with industry trends, concepts, and best practices in cybersecurity.