Cyber/Security Operations Analyst

Comtech LLC; Baltimore (MD); On-site; USD 80,000 - 100,000; Full time

Job summary

Comtech LLC is seeking a Security Operations Specialist in Baltimore, MD. The specialist will be responsible for operating and maintaining security tools such as McAfee ePO, Nessus Security Manager, and Splunk Enterprise to support the Office of Information Security.

Successful candidates will demonstrate proficiency in AWS Cloud Security and be adept in managing security operations. The role involves vulnerability management, incident response, and compliance tracking against Federal security policies.

Qualifications

• Experience operating and maintaining security tools like McAfee ePO, Nessus Security Manager, and Splunk.
• Proficient in AWS Cloud Security and Security Operations.

Responsibilities

• Operate and maintain security tools for the Office of Information Security.
• Analyze vulnerability and compliance scans to support monitoring and reporting.
• Identify risks and track findings against Federal security policies.

Skills

AWS Cloud Security Proficient

Security Operations Proficient

Tools

McAfee ePO

Nessus Security Manager

Splunk Enterprise

Job description

Job Description

The Security Operations Specialist will be responsible for operating and maintaining security tools such as McAfee ePO, Nessus Security Manager, and Splunk Enterprise for the Client's Office of Information Security team.

Technical Skills

• Mandatory AWS Cloud Security Proficient
• Security Operations Proficient

Job Responsibilities

• Operating and maintaining security tools such as McAfee ePO, Nessus Security Manager, and Splunk Enterprise.
• Running and analyzing vulnerability and SCAP compliance scans to support continuous monitoring reporting and vulnerability management. Work with the Client's Office of Information Security team and stakeholders to monitor effectiveness of implemented security controls, review and monitor Splunk dashboards to detect security alerts, and provide incident response reporting.
• Using security configuration management tools to identify risks and track findings against Federal security policies and guidelines for mitigation planning and remediation. May support security configuration management processes for modifications to current or implementation of new security solutions in the Cloud environment.