Cybersecurity Analyst - Operations Watch Analyst

Adapt Forward; Stuttgart; Vor Ort; EUR 50.000 - 90.000; Vollzeit

Zusammenfassung

An established industry player in cybersecurity is seeking a dedicated Operations Watch Analyst to join their team in Stuttgart. In this role, you will be at the forefront of protecting sensitive data by investigating suspicious events and ensuring compliance with critical reporting requirements. Your expertise in incident response and network forensics will be essential in providing 24/7 support and maintaining the integrity of information systems. This position offers an exciting opportunity to work with advanced threat assessment technologies and contribute to safeguarding vital information against evolving threats. If you are passionate about cybersecurity and ready to tackle complex challenges, this role is for you.

Leistungen

Comprehensive Physical Wellness Package

401k Retirement Plan with Matching Contribution

Annual Training Budget

Eleven Federal Holidays

Three weeks of PTO/vacation/sick leave

Employee Assistance Program

Qualifikationen

• Minimum of a Secret Clearance required.
• Bachelor's degree or 3 years of relevant experience needed.
• Knowledge of CJCSM 6510.01B is a plus.

Aufgaben

• Investigate and validate suspicious events to determine incidents.
• Provide 24x7 support for incident response capabilities.
• Perform network and host-based digital forensics.

Kenntnisse

Incident Response

Packet Analysis

Network Forensics

Analytical Thinking

Problem Solving

Communication Skills

Ausbildung

Bachelor’s degree in a relevant discipline

Three years of directly relevant experience

Tools

Wireshark

Splunk

Jobbeschreibung

Cyber Security Analyst- Operations Watch Analyst
Stuttgart, Germany
Minimum of a Secret Clearance Required with ability to obtain TS/SCI

Position Description
As an Operations Watch Analyst, you will isolate, investigate, inform, and implement measures to detect and protect data across a wide spectrum of sources and locations. The candidate is required to validate suspicious events or reports and determine if the event constitutes an incident. The candidate will ensure incidents are properly entered into the appropriate reporting system and determine the severity of the incident. Reporting and response measures will be taken immediately in order to satisfy the Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B reporting requirements.

Position Requirements and Duties

1. Maintains familiarity with CJCSM 6510.01B.
2. Compiles and maintains internal standard operating procedure (SOP) documentation.
3. Ensures associated documentation and capabilities remain compliant with CJCSM 6510.01B and other applicable policy directives.
4. Provides network intrusion detection and monitoring, correlation analysis, incident response and support for the Cybersecurity Service Provider (CSSP) and its subscriber sites.
5. Validates suspicious events or reports and determines if the event constitutes an incident and properly enters associated data into the appropriate reporting systems.
6. Coordinates with JFHQ-DoDIN and supported entities regarding significant incidents to ensure proper analysis is performed and timely and accurate reporting of the incident is completed.
7. Provides 24x7 support for the CSSP’s Incident Response capability during non-core business hours consistent with CSSP requirements as needed.
8. Performs network and host-based digital forensics on Microsoft Windows based systems and other operating systems as necessary to enhance response to, support of, and investigation into significant network incidents.
9. Possesses working knowledge of full packet capture PCAP analysis and accompanying tools (Wireshark, etc.).
10. Explores patterns in network and system activity via log correlation using Splunk and supplemental tools.
11. Possesses understanding of IDS/IPS solutions to include signature development and implementation.
12. Participates in program reviews, product evaluations, and onsite certification evaluations.
13. Overtime may be required as needed to support incident response actions (Surge).
14. Due to the nature of the work required, operations are conducted 24/7/365 with three primary shifts. Choice of shifts will be made available with the understanding that placement is at the discretion of the CSSP Services Director and/or assigned manager.
15. This position requires a shift of four (4) ten-hour days per week, which includes one weekend day. Example schedules may include Wednesday to Saturday or Sunday to Wednesday.

Minimum Qualifications

1. US Citizen
2. Bachelor’s degree in a relevant discipline OR at least three years of directly relevant experience, preferably in a DoD environment.
3. Up to 15% global travel may be required; emergency travel may be required with 72-hour notice for incident response and to support other program needs.

Preferred Qualifications

1. At least five years of incident response experience.
2. The ability to solve problems independently.
3. Knowledge of Incident Response Procedures.
4. Knowledge of Packet Analysis.
5. Knowledge of IDS/IPS solutions.
6. Familiarity with various Host-Based Tools.
7. Experience with Log Aggregation Tools.
8. Logical thinking and analytical ability.
9. Verbal and written communication ability.
10. Highly Desired Skills:
11. Knowledge of CJCSM 6510.01B.
12. Experience with Digital Forensics.
13. The ability to solve problems independently.

Required Certifications
IATII and CSSP Compliant Certifications

Company Overview

Adapt Forward is a cybersecurity solutions provider for some of the nation’s most valuable information systems. Leveraging advanced threat assessment technology and experience in building high-level information security infrastructure, we develop adaptive solutions uniquely tailored to our customers’ business objectives to protect sensitive data against sophisticated threats in an increasingly complex security environment.

Summary of Benefits

• Comprehensive Physical Wellness Package, including Medical, Dental, Vision Care, plus Flexible Spending Accounts for health- and dependent-care are included in our standard benefits plan.
• 401k Retirement Plan with Matching Contribution is immediately available and vested.
• Annual Training Budget to be used for conference attendance, school enrollment, certification programs, and associated travel expenses.
• Eleven Federal Holidays, plus three weeks of PTO/vacation/sick leave that accrues at a rate of ten hours per month.
• Employee Assistance Program: Counseling/legal assistance and other employee well-being programs are also offered.

Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities.