Executive Job Description | Senior Information Security Analyst Security Clearance Required(Secret or Top Secret) CISSP, SANS and GIAC certifications – BIG Plus Responsibilities: • Perform in-depth analysis in support of Network Monitoring & Incident Response operations for a Cabinet-Level Federal Agency. • Contribute to a team of approximately 30 information assurance professionals working with Intrusion Detection Systems (IDS) software and hardware, analyzing IDS data, writing reports, briefing event details to leadership, and coordinating remediation with personnel throughout the globe. • Develops requirements for technical capabilities for cyber incident management. • Recommends configuration changes to improve the performance, usability and value of cyber analysis tools. • Ensures technical improvements are effective and maintained within configuration management structures. • Ensures technology employed by the incident response team compliments operational processes. • Provide ad hoc technical training to cyber incident response analysts • Identify, analyze, remediate and report on cyber security incidents. • Interacts with cyber intelligence analysts conducting threat analysis operations as well as numerous IT professionals performing varying technical roles within the client organization. • Provide verbal briefings to clients on pending cyber incidents. • Analyze malware to determine direct threats to client organization • Coordinate with US-CERT as necessary to convey incident information. • Maintain detailed incident logs in analysis database. The successful candidate: • Thinks like a hacker and anticipates cyber attack vectors • Demonstrates an internet and aptitude for problem solving • Ability to effectively communicate with other team members to convey highly detailed technical information; must have excellent writing & speaking skills. • Seeks out opportunities to increase exposure to many types of technologies. • Takes initiative to understand & master new operating systems, security applications, and open source tools. • Actively contributes to technical growth of the entire team. • Demonstrates knowledge in information technologies to include computer hardware and software, operating systems and networking protocols, specifically TCP/IP • Understands and applies concepts of computer forensics • Familiarity with open source cyber security information sources such as SANS Internet Storm Center, Security Wizardry, Viral Total, etc. • Experience with security technologies, including Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls & Log Analysis, Security, Security Event Information Management (SIEM), Anomaly Detection Systems (ADS), and Network Packet Analyzers such as Ethereal/Wireshare.
|