Cybersecurity Analyst

BDR Solutions LLC seeks a Cybersecurity Analyst to support the security program by monitoring, investigating, assessing, and improving the security environment using modern tools and controls.

• Monitor and analyze security alerts from SIEM
  , IDS/IPS
  , firewalls
  , and endpoint protection
  .
• Investigate and respond to security incidents to support timely containment and remediation
  .
• Perform vulnerability assessments and recommend mitigation strategies.
• Create daily, weekly, monthly, and/or quarterly vulnerability reports tracking critical, high, medium, and low findings with actionable detail (including examples of trends such as increases, remediations, percent changes, affected platforms, and vulnerability categories).
• Maintain and update security documentation, including incident reports and playbooks
  .
• Collaborate with IT teams to implement security controls and best practices.
• Conduct threat intelligence research to identify emerging risks and attack vectors.
• Support compliance efforts using relevant frameworks, including NIST and ISO 27001
  .
• Assist with security awareness training for employees.
• Participate in regular security audits and risk assessments
  .
• Provide recommendations to improve overall security posture.
• Coordinate with engineering, operations, development, and customers to maintain practices aligned to defined information security policies and standards.
• Conduct continuous assessment of current technology architecture for vulnerabilities, weaknesses, and other risks.
• Support internal and third-party security audits.
• Coordinate and report on technical aspects of incident management processes and operational components, including detection and measurement.
• Manage day-to-day threat and vulnerability management
  , identify risk tolerances, recommend treatment plans, and communicate residual risk
  .
• Ensure audit trails, system logs, and cybersecurity monitoring data sources are configured per cybersecurity policy and available to necessary parties for review and compliance.
• Support security-testing procedures to verify security of systems, networks, and applications and assist remediation of identified vulnerabilities.
• Liaise among internal teams and external vendors to ensure compliance and a strong security posture.
• Consult with IT staff so security is included in evaluation, selection, installation, and configuration of hardware, applications, and software.
• Recommend and coordinate implementation of technical controls to enforce defined security policies.
• Implement and maintain Splunk / Tenable platform infrastructure and configuration, plus support day-to-day operational and user needs.
• Customize Splunk queries and support service help desk requests related to the Splunk / Tenable platforms.
• Perform advanced searching, forensics, and analytics using security tools to support cybersecurity tasks.

• U.S. citizenship required
  ; select applicants will be subject to a government security investigation to meet eligibility for access to classified information and obtain a government-granted security clearance.
• Eligible for DOD Top Secret clearance with SCI
  .
• One or more Information Security
  
  Certifications:
  
  Security+,
  CEH
  , CISSP
  , CISA
  , CISM
  , CBCP
  , or GIAC
  .
• Bachelor’s in Cybersecurity or similar field.
• Minimum 3 years of IT experience, including: 3 years in an information security role and 3 years with Splunk Enterprise
  .
• Strong understanding of the business impact of security tools, technologies, and policies.
• Analytical and high-level problem-solving skills for complex information security issues.
• Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint, Outlook) for documentation, reporting, and presentations.
• Excel
  : pivot tables, formulas, data analysis, and data visualization for…