Cyber Incident​/Forensic Analyst II

Job Summary

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.

Incident response, risk analysis, and advanced troubleshooting. Responsible for the day-to-day management and monitoring of security systems after implementation by the Cybersecurity teams. Performs network observability, threat detection, security metrics reporting, and automation-driven operational workflows to maintain continuous visibility into the organization’s security posture and enable rapid identification and response to security events. Escalates complex changes or advanced troubleshooting to engineers.

This role is part of the Cybersecurity Defense Operations career track, focusing on security monitoring, enforcement, and operational risk reduction.

Implement and integrate enterprise security technologies, ensuring security policies are effectively enforced across hybrid environments. Analyze policy effectiveness, recommend policy adjustments. Ensures that security policies remain enforced across security systems and services as part of operational security responsibilities. Work closely with engineers for major updates and reconfigurations. Leverage networks observability data and security telemetry to support threat detection, validate policy effectiveness, and produce actionable metrics for reporting for operational and executive visibility.

Automation workflows should be applied to policy enforcement and validation processes where applicable.

Advise internal teams on security control best practices, aligning security solutions with business needs. Provide data-driven consulting, supported by metrics and threat intel to improve decision making. This role will provide on-site support for cybersecurity, infrastructure, and business solutions.

Monitor patch compliance, troubleshoot patch-related security issues. Incorporates security telemetry and network observability to identify patch-related risk exposure, enhance threat coverage, and support metrics reporting on compliance posture.

Develop scripts and automation to streamline security solution deployments, focusing on segmentation and VPN automation. Expand workflow observability and metrics reporting pipelines to measure solution deployment effectiveness and security impact.

Optimize security tools for better efficiency and integration. Maintain and manage deployed security systems such as firewalls, VPNs, and segmentation controls, ensuring continued security enforcement and policy compliance. Optimize enterprise security enforcement technologies, ensuring efficiency and seamless integration. Support the design and implementation of security enforcement technologies. Integrates network observability frameworks and threat detection capabilities into deployed systems and provide performance, risk, and compliance visibility.

Automation workflow should be used to enhance monitoring, tuning, and operational response processes.

Support operational security teams by ensuring all security technologies are correctly integrated and aligned with enforcement policies. Create and advance automation workflows that improve operational efficiency and incident response effectiveness. Mentor other analysts and engineers. Contribute to process improvements.

This track leads to advanced roles in security operations, incident response, and strategic cybersecurity defense leadership.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

56605

Information Technology

0% - 25%

Full-Time Salary

California