Job Description:

The Investigative Analyst (IA) plays a vital role in enhancing and upholding the overall security posture of systems. As an IA, you will work both independently and collaboratively to apply your expertise in Cybersecurity policy, technologies, and tools to complex situations. Additionally, you will leverage your understanding of APTs and associated tactics, attack frameworks, and techniques to swiftly respond to threats. Perform rapid investigation and remediation of advanced attacks that require analysis and remediation; often escalated from Triage Team. Investigative Analysts also directly monitor alerts for sensitive assets and known attacker campaigns. This role may include the need to work outside of core hours on high priority investigations and may also include on-call responsibilities

Responsibilities include:

• Evaluating security risks and impacts
• Proactively hunting and monitoring for indications of misuse or attack
• Thoroughly investigating and remediating misuse and attacks (to include basic forensics activities)
• Documenting events via technical reports and Incident Management protocols
• Creating, maintaining, recommending, updating & enforcing SecOps tools, capabilities, and processes
• Leading and participating in Cybersecurity related exercises

Here's what you need:

• Bachelor’s degree in Cybersecurity, IT (or another related field) and 2+ years of hands-on Cybersecurity OR, in lieu of a Bachelor’s degree, 3+ years of hands-on Cybersecurity experience
• 1+ year of experience operating in a cloud environment (strong preference for Azure experience)
• 1+ years hands-on experience with enterprise vulnerability management tools
• 2+ year of experience with querying languages
• DoD 8570 IAT Level 2 or DoD 8140 certification and willingness to maintain certification
• Deep understanding and experience with Windows and/or Linux Operating Systems
• Willingness to obtain Microsoft SC-200 within 6 months of onboarding

Bonus points if you have:

• Experience with Splunk, HBSS, ACAS, or Microsoft Security Products
• Scripting experience with any of the following: Bash, Python, Python
• Experience with DevSecOps pipelines and SAFe methodology supporting Security Operations
• DOD 8570 CSSP Incident Responder certification
• Strong oral and written communication skills

Security Clearance:

• An active TS/SCI security clearance