Junior Cybersecurity Analyst

THE OPPORTUNITY

The Jr. Cybersecurity Analyst is responsible for monitoring and responding to security incidents, performing security analysis, and providing triage and support for security-related issues. This role serves as the frontline of the organization's cybersecurity operations, working closely with operation captains, leadership, and incident response teams.

• Participate in security incident response investigations to resolve CND incidents.
• Collect, track, and document computer network defense (CND) incidents from initial detection through final resolution.
• Perform analysis of log files from various sources to identify and investigate threats (host logs, proxy logs, network traffic logs, firewall logs, and intrusion detection system (IDS) logs).
• Perform CND incident triage, determining scope, urgency, and potential impact; identifying vulnerability; and making recommendations that enable fast remediation.
• Perform real-time CND incident handling (intrusion correlation/tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs).
• Receive and analyze alerts from various sources and determine root cause.
• Communicate with customers to verify anomalous activity.
• Respond to customer requests.
• Additional duties as assigned.

• 1-3 years general IT experience
• CompTIA Security+, Network+ or A+
• Knowledge of Transmission Control Protocol and Internet Protocol (TCP/IP), Dynamic Host Configuration Protocol (DHCP), directory services (e.g., Domain Name System (DNS)) and how they interact to provide network communication
• Knowledge of CND policies, procedures, and regulations
• Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution)
• Knowledge of intrusion detection methodologies and techniques for detecting host- and network-based intrusions via intrusion detection technologies
• Knowledge of incident response and handling methodologies (incident categories, incident responses, and timelines for responses) and security event correlation tools
• Knowledge of system and application security threats and vulnerabilities (buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language (PL/SQL) and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)
• Knowledge of network security architecture concepts, including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities
• Skill in handling malware and protecting a network against potential threats via usage of malware analysis concepts and methodology
• Knowledge of general attack stages (foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks
• Knowledge in packet-analysis and network traffic analysis
• Skill in securing network communications, performing damage assessments and preserving evidence integrity according to SOP or national standards
• Knowledge of basic system administration, network, and operating system hardening techniques
• Knowledge of data backup, types of backups (full, incremental), and recovery concepts and tools
• Strong communication skills (written/oral)

• Associate's degree in computer related field
• CompTIA A+, Net+ or Security+
• Previous experience in a Cybersecurity role

• You will be part of a company that is growing quickly and values your voice, ideas, and experience
• You will be a key contributor to Iron Bow's transformational shift in how we deliver value to both customers and employees
• You will have the pleasure of working with passionate professionals in a culture that fosters a workplace where everyone feels respected, supported and empowered to succeed

The salary range for this position is $27.00 - $30.00/hr this range reflects the anticipated base pay for the position and is not a…