Junior Cybersecurity Analyst

Pueo is known for bringing the best talent and unique tools to every opportunity. Pueo's Parliament (aka workforce) is composed of professionals who are seeking the opportunity to work in a small business with a flat organization that thrives on career development and independence. In support of mission and professional growth, our Parliament has supported the development of multiple patents, proprietary tools, and applications as well as trademarked processes.

Our flat organization emphasizes career development across multiple career environments (at the members own pace) and ensures those who contribute broadly are properly rewarded. Pueo has four career environments where every member of the parliament can participate. Each environment has opportunities available for all levels. Opportunities are framed by an employee's desires and capabilities, and we ensure challenges, growth, and unique experiences are available for employees at all levels.

Our Career Environments (Program, Functional, Service, and Leadership) provide numerous opportunities for employees to invest in their personal growth and those things that offer fulfillment. We invest in helping our members create and execute their career development plans. Our Pods (small teams of 5 or less) are comprised of personnel with similar skillsets to ensure mentorship, understanding, and peer support.

Role:

Pueo is seeking a highly motivated Jr. Cybersecurity Analyst to join our team and play a vital role in enhancing, securing, and protecting the US Department of Veterans Affairs (VA) information and cybersecurity posture within the VA Cybersecurity Operations Center (CSOC).

As a Jr. Analyst with the CSOC you will be responsible for providing Cybersecurity Incident Response and Handling Support. Your role will involve a wide range of responsibilities, including assisting with incident response efforts, actively monitoring VA solutions and tools, investigating anomalies, and collaborating with the team to resolve cybersecurity incidents.

**This is an onsite position**

Primary Responsibilities:

· Assist with all events and incidents from beginning to end.

· Follow procedures and managerial guidance and recommendations for incident containment, validation, and eradication.

· Support incident remediation and recovery efforts.

· Investigate and determine the nature of security events and alerts.

· Confirm if an event meets the criteria of a cybersecurity incident.

· Assist with initial triage and create incident tickets.

· Utilize the Cybersecurity Threat Framework to classify incidents.

· Analyze event and alert data to validate security incidents.

· Create and update incident tickets with concise and relevant information.

· Follow incident notification escalation procedures.

· Validate and assign severity levels to security events.

· Identify event and incident correlations and suggest mitigation actions.

· Create and provide incident reports for confirmed incidents.

· Continuously update incident reports.

· Coordinate with team to resolve cybersecurity incidents.

· Follow incident response guidelines and industry best practices.

· Monitor communication avenues for incident intake.

· Assist with documenting for reporting all VA security-related incidents to CISA in accordance with Federal Incident Reporting Guidelines.

· Assist with documenting updates for the CSOC Incident Response Playbook.

· Utilize government-approved incident response use-case workflows and processes.

· Daily review and update of all opened tickets in your purview.

Basic Qualifications:

• · Must be able to obtain a Public Trust with a Tier 4/High Risk background investigation.
• · Bachelor's degree in a relevant field and 2+ years of prior relevant experience or 5 years of relevant experience in lieu of degree.
• · Must have one or more of the following industry certifications in good standing:
• · EC-Council's Certified Incident Handler (E|CIH)
• · GIAC Certified Incident Handler (GCIH)
• · Incident Handling & Response Professional (IHRP)
• · Certified Computer Security Incident Handler (CSIH)
• · Certified Incident Handling Engineer (CIHE)
• · EC-Council's Certified Ethical Hacker (CEH)
• · Experience and basic understanding of security technologies including SIEM, SOAR, IDS/IPS, EDR, and network monitoring tools.
• · Excellent analytical and problem-solving skills.
• · Ability to work independently and in a team environment.
• · Strong verbal and written communication skills.

Preferred Qualifications:

· Experience supporting incident response in an enterprise-level Security Operations Center

· Experience utilizing a ticket system such as ServiceNow

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.