Cyber Security Analyst II

Abacus Technology Corporation; Sumter (SC); Hybrid; USD 65,000 - 95,000; Full time

Job summary

Abacus Technology Corporation seeks a Cyber Security Analyst to support AFCENT NOSC at Shaw AFB in a full-time role. The candidate will analyze IDS/IPS events, conduct vulnerability assessments, and develop countermeasures to protect AFCENT networks.

Responsibilities include configuring security devices, analyzing logs from DNS/AD/servers, and providing 24/7/365 support in a TDY-capable environment. Security+ and CCNA/Network+ are required with ITIL Foundations certification or plan to obtain it.

Qualifications

• Associate’s degree in a related field; 3+ years of cyber security experience accepted in lieu of degree.
• Security+ and Network+ or CCNA certifications are required.
• ITIL Foundations certification is required or obtainable within 60 days.
• Firewall experience and Windows Server administration experience are required.
• Must be a US citizen with a current Secret security clearance; ability to travel for TDY.

Responsibilities

• Analyze network intrusion detection systems and conduct vulnerability assessments.
• Develop methods to detect and prevent intrusive activities using current knowledge.
• Assist in developing countermeasures to isolate, contain and secure networks.
• Install, configure, maintain, and manage security devices including IDS/IPS, ESS/HBSS, and forensic tools.
• Assist in development and documentation of sensor processes and checklists.
• Analyze firewall logs and logs from DNS, proxy, domain controller, file server and Active Directory.
• Develop methods to identify, contain, log and analyze intrusive activities and vulnerabilities.
• Conduct network security monitoring and intrusion detection analysis using security tools (IDS/IPS, firewall, proxy, router, Fidelis, Trellix, LogRhythm).
• Write and develop custom scripts for tasks related to Cybersecurity toolsets.
• Provide LAN/WAN support.

Skills

Cyber security

Network monitoring

Threat analysis

Incident response

Scripting

Education

Associate's degree

Security+ certification

Network+ or CCNA

ITIL Foundations

Tools

IDS/IPS

Fidelis

Trellix

LogRhythm

DNS

DHCP

Active Directory

Windows Server

Job description

Overview

Abacus Technology is seeking a Cyber Security Analyst to provide technical support for the AFCENT Network Operations and Security Center (NOSC) at Shaw AFB. This is a full-time position.

Responsibilities

• Analyze network intrusion detection systems and conduct vulnerability assessments.
• Develop methods to detect and prevent intrusive activities utilizing knowledge.
• Assist in developing countermeasures to isolate, contain and prevent intrusive actives and secure.
• Install, configure, maintain, and manage the AFCENT/USCENTCOM security devices to include but is not limited to IDS/IPS, ESS/HBSS, and forensic tools.
• Assist in development and documentation of sensor process and checklists.
• Analyze network firewall and computer network server (DNS, proxy, domain controller, file server, Active Directory) logs.
• Develop methods to identify contain, log, and analyze intrusive activities and security vulnerabilities on AFCENT networks.
• Conduct network security monitoring and intrusion detection analysis using the AFCENT/USCENTCOM selected security tools to include but is not limited to IDS/IPS, firewall, proxy, router, Fidelis, Trellix, and LogRhythm logs.
• Write and develop custom scripts as needed to perform tasks relate to all Cybersecurity toolsets, such as custom parsers and responses.
• Provide LAN/WAN support.

Qualifications

3+ years experience in cyber security. Associate’s degree in a related field. Additional years of experience may be substituted for degree requirements. Must be Security+ certified. Must be Network+ or CCNA certified. Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire. Must have firewall experience. Able to define baseline security requirements in accordance with applicable guidelines. Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server using server images. Experience with implementation of storage solutions, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments. Must be able to provide support in a 24/7/365 environment including occasionally covering shifts outside of the assigned shift and/or providing after hours, weekend, or holiday support as needed on a rotational basis. Must be able to travel to CONUS sites to provide TDY support. Must be a US citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled