Cybersecurity Analyst

CompQsoft Inc; New York (NY); Hybrid; USD 130,000 - 180,000; Full time

Job summary

CompQsoft Inc seeks a seasoned Security Certification professional to proactively monitor, detect, and respond to threats across networks, systems, and cloud environments to protect sensitive data and maintain enterprise resilience.

The role emphasizes incident investigation, risk analysis, and adherence to NIST/FISMA standards, supporting DOE systems with collaboration across SOC, Cloud, and Infra teams.

Qualifications

• Proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive data and maintain enterprise resilience.
• 5+ years of experience.
• Certification options include CISSP, CompTIA Security+, CompTIA CySA+, CEH, GCIA, CISA, GCIH, CCSP.

Responsibilities

• Perform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of DOE systems, applications, and data assets.
• Analyze security alerts and events to identify IOCs, attack patterns, and emerging threats across on‑premises, cloud, and hybrid environments.
• Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision‑making and prioritization.
• Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact.
• Ensure alignment with federal and regulatory security standards (e.g., NIST, FISMA) and internal cybersecurity policies and control frameworks.
• Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments.
• Monitor, analyze, and detect cybersecurity threats across multiple security domains, including SOC, Cloud Security, Infrastructure Security, Information Protection, and Data Protection.

Tools

Devo/Splunk

Rapid7

Armis

AWS

Azure

Wireshark

SQL

Python

Power BI

MS Office Suite

Job description

Certification

Either one of ( CISSP, CompTIA Security+, CompTIA CySA+, CEH, GCIA, CISA, GCIH, CCSP, CCSP)

Experience

5+ years

Requirements

Proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive data and maintain enterprise resilience. Drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization’s security posture.

Key Requirements

• Perform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of Department of Education (DOE) systems, applications, and data assets.
• Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments.
• Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization.
• Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact.
• Ensure alignment with federal and regulatory security standards (e.g., NIST, FISMA) and internal cybersecurity policies and control frameworks.
• Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments.
• Monitor, analyze, and detect cybersecurity threats across multiple security domains, including Security Operations (SOC), Cloud Security, Infrastructure Security, Information Protection, and Data Protection.

Technologies

SIEM (Devo/Splunk), Vulnerability Scanners (Rapid7/Armis), Cloud Security Platforms (AWS/Azure), Wireshark, SQL, Python, MS Power BI, and Microsoft Office Suite.

Equal Opportunity Statement

CompQsoft provides equal opportunity in all aspects of employment and in the working environment to all employees and applicants. CompQsoft does not take any non-merit factors like race, color, religion, sex (gender), mental/physical disability, and age into account for purposes of recruitment, hiring and development.