Cybersecurity Analyst – Tier 2; On-Site

States/Districts excluded from this job ad: AK, CA, CO, CT, DC, HI, IL, LA, MA, MN, MO, NE, NV, NH, NJ, NM, NY, ND, OR, PR, RI, VT, WA, WY.

Location(s): Capital Region Readiness Center (CRRC) 221 Butler Avenue, Martinsburg, West Virginia, 25405

Are you ready to defend critical systems against today's most advanced cyber threats? We are seeking a Cybersecurity Analyst - Tier 2 to monitor alerts, investigate incidents, and ensure swift, effective responses to protect data and systems.

The Cybersecurity Analyst - Tier 2 safeguards the Department of Veterans Affairs (VA) digital assets and responds to, investigates, and mitigates potential cyber threats.

3 years of experience supporting incident response in an enterprise-level Security Operations Center (SOC).

Bachelor's degree in computer science, cybersecurity, information technology or related field;
Must have or be willing to obtain one of the following certifications: GIAC Certified Incident Handler, EC-Council's Certified Incident Handler (E|CIH), GIAC Certified Incident Handler (GCIH), Incident Handling & Response Professional (IHRP), Certified Computer Security Incident Handler (CSIH), Certified Incident Handling Engineer (CIHE), EC-Council's Certified Ethical Hacker.

• Above average understanding of cybersecurity principles and incident response methodologies
• Strong experience with security technologies (e.g., Security Information and Event Management (SIEM), Intrusion Detection System/Intrusion Prevention System (IDS/IPS), Endpoint Detection and Response (EDR), network monitoring tools)
• Experience with enterprise ticketing systems (e.g., Service Now)
• Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions
• Ability to learn and function in multiple capacities
• Ability to be proactive in a high-pressure environment to ensure SOC operates effectively
• Excellent analytical and problem-solving skills
• Excellent verbal and written communication skills
• Ability to work third shift (10:30PM ET - 7:00AM ET) to support 24/7 cybersecurity operations

General Physical Requirements needed to perform the essential functions of this job may vary based on the location of the assignment.

• Capital Region Readiness Center (CRRC) 221 Butler Avenue, Martinsburg, West Virginia, 25405

• Sedentary Work – Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
• Typing, communicating, repetitive motions.
• Close visual acuity to prepare and analyze data, view computer monitors and read. May need to view presentation screens and other visual aids in a virtual setting.
• Inside environmental conditions with protection from outside elements.

Ability to obtain/maintain a Federal Civilian Public Trust.

• U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years

• Covers 10 year period and in some instances lifetime events
• OPM Security Investigations Index (SII)
• DOD Defense Central Investigations Index (DCII)
• National Agency Check (NAC) records
• FBI name check
  
  FBI fingerprint check
• Credit report check
• Written inquiries to previous employers and references listed on the application for employment
• Potential interviews with the subject, spouse, neighbors, supervisor, coworkers
• Law enforcement check
• Court records check
• Education check - Attendance and Degrees

Acceptable Credentials.

• Performs real-time monitoring and triage of security alerts in Cybersecurity toolsets including SIEM and EDR
• Makes accurate determination of what alerts are false positives or require further investigation and prioritization
• Leads and actively participates in the investigation, analysis, and resolution of cybersecurity incidents
• Analyzes attack patterns, determines the root cause, and recommends appropriate remediation measures to prevent future occurrences
• Ensures accurate and detailed documentation of incident response activities, including…