Cyber Security Analyst

Experience in the field of Information Systems Security is required. CISSP, CISM, CISA, or System Administration, Networking, and Security Institute (SANS)/Global Information Assurance Certification (GIAC) certifications preferred.

Cisco or Microsoft certifications preferred, with extra preference given to advanced Cisco or Microsoft certifications such as Cisco Certified Security Professional (CCSP), Cisco Certified Network Professional (CCNP), Cisco Certified Design Professional (CCDP), Cisco Certified Internetwork Expert (CCIE), or Microsoft Certified Systems Engineer (MSCE).

Analyst must have a working knowledge of relevant NIST and/or CIS information security regulations and guidelines. Working knowledge of IT Security Best Practices regarding (a) networks and networking including protocol analysis, anomaly detection, and troubleshooting, and/or (b) working knowledge of IT Security Best Practices regarding Windows and
* nix Servers and workstations is required.

Significant working experience with vulnerability assessment tools including but not limited to the following technologies: databases, web-based applications, Windows, and
* nix file servers and data networks.

• Knowledge of networking protocols and systems architecture – 7 years
• Knowledge of Operating Systems (Windows, Linux, Unix) – 7 years
• Understanding of web applications, databases, and cloud technologies – 7 years
• Knowledge of firewalls, antivirus software, and endpoint protection solutions – 7 years
• Ability to identify security vulnerabilities and recommend remediation actions – 5 years
• Intrusion Detection and Prevention Systems (IDPS) – 5 years
• Critical thinking and analytical skills to assess and respond to security incidents – 5 years
• Security information and event management (SIEM) – 5 years
• Threat & vulnerability management – 3 years
• Security Awareness & Training – 3 years
• Cybersecurity Digital Forensics – 5 years
• Certificate Management – 3 years
• Security Certification (CEH, CISSP, GIAC, CRISC, CCNP/CCNA, Comp TIA Security certification(s), et al) – 3 years
• Network Detection and Response (NDR) – 3 years
• Cloud security posture management (CSPM) – 3 years
• Network access control – 3 years
• Security Operations Center (SOC) – 3 years
• Penetration Testing – 3 years
• Static Application Security Testing – 3 years
• Dynamic Application Security Testing (DAST) – 3 years

Fields marked with a * are required.