Clearance Level Must Currently Possess: Top Secret

Clearance Level Must Be Able to Obtain: Top Secret/SCI

Investigates, analyzes, and responds to cyber threats, events and incidents within a network environment or enclave.
Use data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats.
Interpret, analyze, and report all threats, events and anomalies in accordance with computer network directives, including initiating, responding, and reporting discovered events.
Evaluate, test, recommend, coordinate, monitor, and maintain cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software.
Ensure that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standards.
Identify information technology threats, security risks and exposures, determine the causes of security violations and suggests procedures to halt future incidents and improve security.
Develop techniques and procedures for conducting cybersecurity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks.
Interpretation, analysis, and delivering reports regarding all event(s) and anomalies in accordance with computer network directives.
Evaluates, tests, recommends, coordinates, monitors, and maintains cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software
Ensures that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standards
Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security
Develops techniques and procedures for conducting cybersecurity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks
May coach and provide guidance to less-experienced professionals
Utilize available resources to conduct Cybersecurity activities, and report to senior GDIT and government personnel on overall program security posture
Conduct network and system audits for vulnerabilities using Security Technical Implementation Guides (STIGs), ACAS vulnerability scanner, and DISA SCAP to mitigate those findings for Solaris, Linux, Windows, and associated network operating systems
Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices
Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance
Provides guidance and work leadership to less-experienced technical staff members
Maintains current knowledge of relevant technology as assigned
Participates in special projects as required.
May serve as a team or task lead

EDUCATION and EXPERIENCE:

BA/BS or equivalent, 5+ years of experience (additional years of experience can substitute for lack of degree).
Must have certifications that meet 8570 Compliance. (I.e. CISSP, CEH, Sec+ or CySA+, IAT level II compliant certification or a CSSP compliant Certification).
Role may require Shift hours (24/7) and shift rotations, must be willing to work shifts.
Familiarity with JFHQ-DODIN Tasking Operations preferred

Must be proficient and possess a strong knack for verbal and written abilities.

Signal Hill Technologies

New Jobs

Cyber Security Analyst