Cybersecurity Host Based Analysis Specialist/ Information Security Analyst II

ITI Solutions Inc.; San Antonio (TX); On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Host Based Analysis Specialist to enhance their information security efforts. This role involves performing incident triage, creating custom signatures for incident detection, and providing expert support in incident handling and forensics. The ideal candidate will have a strong background in analyzing network intrusion data and developing comprehensive incident response strategies. Join a team dedicated to safeguarding systems and networks while training personnel on cutting-edge security technologies. This is an exciting opportunity to make a significant impact in the cybersecurity field.

Qualifications

• 2+ years of experience analyzing network intrusion data.
• Expertise in creating custom signatures for incident detection.

Responsibilities

• Perform incident triage to assess vulnerabilities and impacts.
• Develop incident response guidance and detailed reports.
• Train personnel on current and emerging security technologies.

Skills

Incident Triage

Vulnerability Assessment

Threat Analysis

Forensics Collection

Heuristic Analysis

Education

BS or MS in IT-related field

DoD 8570/8140 IAM or IAT Level II Certification

CSSP-Analyst Certification

Job description

Cybersecurity Host Based Analysis Specialist/Information Security Analyst I

Location: Lackland AFB, San Antonio, Texas

PRIMARY DUTY RESPONSIBILITIES:

1. Perform incident triage to determine scope, urgency, and potential operational impact by identifying vulnerabilities and making recommendations.
2. Create custom signatures or correlation rules to detect future incidents and recommend protections to enhance security.
3. Serve as technical expert and liaison to external incident response personnel, briefing incident details as necessary.
4. Provide incident handling support such as forensics collection, intrusion correlation, threat analysis, and system remediation.
5. Develop and publish incident response guidance and detailed incident reports for relevant audiences.
6. Create SOPs and workflows that incorporate new technologies.
7. Train government personnel on current and emerging technologies to support security efforts.
8. Conduct heuristic analysis on event data, perform high-performance searches, and generate comprehensive incident reports.
9. Monitor and safeguard the security of systems and networks.
10. Support enterprise vulnerability management programs, report events, process task orders, and contribute to vulnerability management policies to meet evolving security needs.

Security Clearance: Top Secret with SCI.

Education/Certifications: BS or MS degree in an IT-related field, DoD 8570/8140 IAM or IAT Level II Certification, and one of the following: CSSP-Analyst.

• At least 2 years of experience analyzing network intrusion data from sources like logs, system images, and packet captures to mitigate network incidents.