Cyber Operations Analyst

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can:
Shape your own future, build the next big thing, and change the world. To be eligible for this position, you must be a U.S. Citizen. This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status.

Export Control/ITAR:
Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3). Please review the job details below.

We are hiring for an experienced Cyber Operations Analyst who must be able and willing to obtain a TS/SCI security clearance. The Cybersecurity Operations Analyst who will provide ongoing support for the Cybersecurity Operations Center (CSOC) in the areas of incident response and investigation. This person will be responsible for providing initial, front-line, analysis and resolution of security alerts as generated by the SIEM and other monitoring solutions capable of generating alerts.

• Monitor security tools and provide appropriate remediation response when necessary.
• Escalate security events as needed and/or driven by process.
• Perform and/or coordinate information gathering and analysis that will be provided to Maxar IT teams responsible for clearing actions.
• Interact with MDR analysts to conduct triage and analysis of real-time data feeds and alerts to detect potential intrusions.
• Work with Cybersecurity Engineering resources to correct issues with log source generation, security tool issues, and building out of automation run books.
• Implement changes to the technologies required, including inclusion of log sources/types and changes to alerts.
• Collaborate and support the vulnerability management team in identification and awareness of zero-day vulnerabilities.
• Participate in Incident Response activities.

• Must be a U.S. Citizen and willing and able to obtain a United States issued TS/SCI security clearance.
• Must work on site three days per week, and more as needed in the Westminster CO office.
• General knowledge of network and system/application architecture and administration principles.
• General knowledge of monitoring-system architecture maintained by Cyber Security, including SIEM and log-management architecture.
• Understanding of current trends in attacker and threat-actor tools, techniques, and procedures.
• Ability and willingness to share on-call responsibilities, work non-standard hours, support Cyber Security investigations, and travel up to 15% when required.

• Bachelor’s degree in information security, Computer Science, or another related field.
• Professional experience with AWS and cloud security technologies.
• Experience supporting digital forensic investigations, including endpoint, host-based, network, and cloud forensics.
• Coding experience with Python and/or Bash.
• Experience with network security and networking technologies, as well as system, security, and network-monitoring tools.

To support pay transparency, Vantor includes salary ranges in all U.S. job postings. Starting pay for this role will fall within the listed range and will be based on factors such as experience, qualifications, skills, location, and market conditions.…