Security Analyst

• Perform cybersecurity activities as part of a team in an organization’s Incident Response Team (IRT).
• Provide analysis support and guidance to other IRT Analysts and team members.
• Initiate and oversee vulnerability scans, both ad-hoc and scheduled, and manage scanning schedules and findings.
• Use Splunk and other sources to discover networks outside of scanning zones.
• Respond to scanning request tickets.
• Proactively identify and resolve issues found in scans while regularly monitoring scanner performance and health.
• Act as technical point of contact for the mission area.
• Collaborate and seek continuous consultation with other analysts and experts—both internal and external to the organization—to leverage analytical and technical expertise.
• Write and publish notifications, guidance, and reports on incident findings to appropriate stakeholders in a well-organized manner through verbal, written, and/or visual means.
• Complete projects, tasks, and associated deliverables on time and with quality.
• Build and maintain client and stakeholder relationships.

• Must be eligible to obtain a Public Trust clearance (U.S. Citizenship Required).
• 4-year college degree in Computer Science or related field and 2 years’ experience or 5 years’ experience in lieu of a college degree.
• Experience demonstrating strong analytical, troubleshooting, and problem-solving skills for cybersecurity.
• Experience with vulnerability scanning technologies, preferably Tenable.sc, Nessus, Nessus Agent, Nessus Network Monitro, Tenable.io, and/or Invicti.
• Excellent communication skills, both written and oral.
• Knowledge of NIST and FISMA guidelines.
• Security+ certification and/or Certified Ethical Hacker (CEH).
• Five (5) years of experience in cybersecurity.

Desired Skills

• Intrusion Detection and Preventions Systems (IDS/IPS).
• Monitoring network security events in an Organization Environment.
• Producing security event reports for management.
• Producing security metric reports for management.
• Knowledge of controls related to the use, processing, storage, and transmission of data.
• Knowledge of current and emerging threats/threat vectors and computer-based intrusion sets.
• Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
• Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).
• Knowledge of cyber defense and information security policies, procedures, and regulations.
• Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
• Knowledge of cyber operations terminology/lexicon.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of incident response and handling methodologies.

• Kansas City, MO (Hybrid, 2 days onsite) or Washington, DC (Hybrid, 2 days onsite).