Cyber Security Analyst II (Government)

att; Chantilly (VA); On-site; USD 98,000 - 146,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

Paid Time Off and Holidays

Paid Parental Leave

Paid Caregiver Leave

Adoption Reimbursement

Disability Benefits

Life and AD&D Insurance

Employee Assistance Programs (EAP)

Wellness programs

Employee discounts

Job summary

AT&T Global Public Sector is seeking a Cybersecurity Analyst II to perform continuous monitoring and Tier II helpdesk duties for a government program. The role requires on-site presence five days a week at a Sterling, VA government customer site with TS/SCI clearance and polygraph.

The position emphasizes NOSC operations, SIEM administration, threat hunting, and collaboration across multiple locations, using tools like Splunk, AWS, CISCO, and VMware.

Qualifications

• Candidate must have 10 years of experience that can be a combination of work history and education.
• Compliance with Department of Defense (DoD) 8140 Information Assurance Technical (IAT) Level 2.

Responsibilities

• Support in establishing and managing a 7 am to 7 PM M-F NOSC to provide a secure environment that facilitates incident response and threat hunting activities.
• Work with collocated NOC analysts to provide relevant artifacts and analysis to assist troubleshooting network transport related incidents.
• Assist Program Management with prioritization and milestone tracking for SOC Operations and Maturity governance.
• Operate the SIEM platform to monitor for security alerts and coordinate vulnerability assessments across servers and network devices.
• Evaluate network structures and device configurations for security risks and gather data to identify intrusions.
• Analyze network traffic (CLOUD and on-prem) and system logs to identify malicious activities and improve SOC/NOC response.
• Demonstrate understanding of DoD policies and MITRE ATT&CK framework and coordinate across locations.

Skills

SIEM

Threat Intelligence

DoD policies

Network security

AWS

Cisco

Splunk

VMware

Windows endpoints

Linux endpoints

Education

Bachelor's degree in computer science, information systems, or other technology-related field

IAT II certified

Tools

Splunk SIEM

Splunk Forwarders

IDS/IPS

SSL Decryption

Proxy

DLP

Job description

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

Our National Security Team supports the intelligence community by providing, operating and assuring critical voice, video and collaboration services for the full spectrum of operations.

AT&T is looking for a Cybersecurity Analyst to conduct continuous monitoring and TIER II helpdesk for a program that delivers cloud and on-prem services across multiple classification levels in the environment.

This position requires office presence a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered. Work to be performed at a government customer site in Sterling, VA.

Description of Job Duties/Responsibilities:

• Support in establishing and managing a 7 am to 7 PM M-F Network Operations and Security Center (NOSC) to provide a secure environment that facilitates incident response and threat hunting activities.
• Work with collocated NOC analysts to provide relevant artifacts and analysis IOT assist troubleshooting network transport related incidents.
• Work with multiple work centers and assist the Program Management staff with prioritization and milestone tracking for efforts related to the SOC Operations and Maturity governance.
• Operate the security information and event management (SIEM) platform to monitor for security alerts and coordinate vulnerability assessments and artifact collection across servers and network devices.
• Evaluate network structures and device configurations for security risks, offering recommendations based on best practices, and gather data to identify and respond to network intrusions.
• Analyze network traffic (both CLOUD and on-prem) and system logs to identify malicious activities, misconfigurations, hardware problems, vulnerabilities exploited, and methods used, and develop processes to enhance SOC and NOC response and efficiency.
• Proficient in analyzing cyber-attacks, with a deep understanding of attack classifications, stages, system/application vulnerabilities, and compliance with Department of Defense (DoD) policies and procedures.
• Extensive knowledge of network topologies, protocols (e.g., TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB), and experience with tools/systems including AWS, Cisco, Splunk SIEM, Splunk Forwarders, IDS/IPS, VMware, SSL Decryption, proxy and DLP operations, Windows and Linux based endpoints.
• Deep understanding of Threat Intelligence integration and associated integration throughout the enterprise at multiple layers.
• Capable of attack reconstruction based on network traffic, integrating Threat Intelligence, and familiar with MITRE ATT&CK framework, with the ability to collaborate effectively across multiple locations.

Required Clearance: TS/SCI with polygraph. (#ts/sci) (#polygraph)

Required Qualifications:

Candidate must have 10 years of experience that can be a combination of work history and education. This equates to a Doctorate and 3 years, master’s and 4 years, bachelor’s and 6 years, associates and 8 years or HS diploma and 10 years.

Additional required qualifications include: Compliance with Department of Defense (DoD) 8140 Information Assurance Technical (IAT) Level 2.

• Bachelor's degree in computer science, information systems, or other technology-related field.
• 5+ years of experience in security operations, demonstrating leadership in customer-facing roles.
• IAT II qualified certifications.

Desired Qualifications:

• Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or relevant DoDM 8140.03 AIM / AIT III qualified certifications

Our Cyber Security Analyst II (Government) earns $98,100 - $146,000 yearly. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays) *Pro-rated when working less than 40 hrs/wk.
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone

Weekly Hours: 40

Time Type: Regular

Location: Chantilly, Virginia

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.