Cybersecurity Incident Response & Threat Detection Analyst (62203)

BMA; Virginia; Remote; USD 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Health coverage

Dental/Vision

ESOP

401(k) match

Zusammenfassung

BMA is seeking a Cybersecurity Incident Response & Threat Detection Analyst to join our team for an upcoming proposal effort. This is a remote, contingent position dependent on contract award.

The role involves 24x7 monitoring of SIEM and other cybersecurity tools to detect and respond to threats within the Enterprise Network Environment, with duties including analysis, defense-in-depth implementation, and OSINT-based threat awareness.

Qualifikationen

• Five (5) years of relevant experience.
• Two (2) years of experience performing root cause analysis of cybersecurity events and incidents.
• Knowledge of at least two types of security tools (Firewall, IDS/IPS, host-based antivirus, DLP, VM, Forensics, Malware Analysis, or Device Hardening).
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response, preferably using SPL, Python, or PowerShell.

Aufgaben

• Participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to threats.
• Protects, monitors, detects, analyzes, and responds to unauthorized activity within the Enterprise Network Environment.
• Reviews logged events for trends indicating attack or compromise and monitors for APT and low-and-slow attacks.
• Maintains awareness of threats using OSINT resources.
• Provides technical analysis and sustainment support for cybersecurity tools and assists with defense-in-depth measures.

Kenntnisse

Experience

Root cause analysis

Defense-in-Depth

Scripting (Python/SPL/PowerShell)

Tools

Firewall

IDS/IPS

Host-based antivirus

Data Loss Prevention

Vulnerability Management

Forensics

Malware Analysis

Device Hardening

Jobbeschreibung

BMA is seeking a Cybersecurity Incident Response & Threat Detection Analyst to join our team in support of an upcoming proposal effort. This is a remote, contingent position, with employment dependent upon contract award.

Job Summary

The Cybersecurity Incident Response & Threat Detection Analyst participates in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment.

Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employs cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats.

Reviews logged events for trends indicative of attack or compromise within the environment. Actively monitors logs and traffic for Advanced Persistent Threats (APT) and “low and slow” attacks within the environment.

Maintains awareness of potential threats through the use of intelligence resources, including Open Source Intelligence (OSINT).

Provides technical analysis and sustainment support for enterprise cybersecurity tools and applications and assists with the application of Defense-in-Depth signatures and perimeter defense controls to diminish network threats.

Clearance Requirements

There is a DoD Top Secret Clearance requirement for this role and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission.

Required Skills & Certifications

• Five (5) years of relevant experience
• Two (2) years of experience performing root cause analysis of cybersecurity events and incidents
• Working knowledge of at least two types of security tools: Firewall, IDS/IPS, host-based antivirus, Data Loss Prevention, Vulnerability Management, Forensics, Malware Analysis, or Device Hardening
• Understanding of Defense-in-Depth
• Ability to build scripts and tools to enhance threat detection and incident response capabilities, preferably using SPL, Python, or PowerShell

Other Duties

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Overview

BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.

Benefits

We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident & illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.

AAP & EEO Statement

BMA Technical Services, Inc. is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.