Cybersecurity Intrusion Detection Analyst

Bowhead Support Services Inc; Vicksburg (MS); On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a dedicated Cybersecurity Intrusion Detection Analyst to enhance its team in Vicksburg, MS. This pivotal role involves utilizing advanced cyber defense tools to analyze network traffic and mitigate potential threats. As a key player in a 24/7 operational environment, you will develop security policies, monitor for intrusions, and perform forensic analyses to safeguard critical information assets. With a focus on continuous improvement and collaboration, this position offers a unique opportunity to make a significant impact in the realm of cybersecurity. Join a forward-thinking company committed to protecting its clients and fostering a secure digital landscape.

Qualifications

• 5+ years of intrusion detection experience.
• Knowledge of network hardware and firewall configuration.
• Certifications: DOD 8570 IAT Level II or equivalent.

Responsibilities

• Analyze network traffic for anomalies and develop response strategies.
• Monitor security platforms for intrusions and insider threats.
• Perform forensic analysis and document incidents thoroughly.

Skills

Intrusion Detection

Network Security

Incident Response

Forensic Analysis

Threat Intelligence

Communication Skills

Education

Bachelor's Degree

Tools

IDS Tools

Firewalls

Network Traffic Logs

Job description

Cybersecurity Intrusion Detection Analyst

Join to apply for the Cybersecurity Intrusion Detection Analyst role at UICGS / Bowhead Family of Companies

Bowhead is seeking a Cybersecurity Intrusion Detection Analyst to join our team in Vicksburg, MS. The Cybersecurity Intrusion Detection Analyst utilizes data from various cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events and mitigate threats. They provide 24x7x365 on-site operational support for cybersecurity service subscribers, working alongside Warning Intelligence Analysts and Engineers within the Attack Sensing and Warning (AS&W) division. Responsibilities include analyzing network traffic for anomalies, developing response strategies, and maintaining continuous monitoring capabilities. Candidates must be able to work 12-hour shifts, day or night, in a 24x7 environment.

Responsibilities

1. Analyze network and system traffic, event logs, and threat intelligence to identify and triage vulnerabilities and determine exploitation likelihood.
2. Develop and monitor security policies and procedures.
3. Assess and consult on the security of various information assets, contributing to asset inventory and categorization.
4. Receive and distribute AS&W information, coordinating with other sources for alert analysis.
5. Analyze IDS alerts to identify unauthorized or anomalous activity, documenting incidents thoroughly.
6. Take appropriate actions to prevent or mitigate threats, developing countermeasures and guidance.
7. Monitor security platforms for intrusions, attacks, and insider threats.
8. Collect and analyze intrusion artifacts, correlating incident data to identify vulnerabilities.
9. Report incidents within required timelines and provide 24/7 incident handling.
10. Perform forensic analysis and share relevant IOCs with Warning Intelligence.
11. Mitigate operational impacts of cyber incidents and contain malware spread.

Qualifications

• Bachelor's degree or equivalent experience.
• At least 5 years of intrusion detection experience.
• Minimum 2 years of relevant IT or System Administration experience and 3 years in Information Security.
• Certifications: DOD 8570 IAT Level II, CSSP-Analyst or CSSP-Incident Responder, with ability to earn DoD 8570 computing environment certification within 6 months.
• Knowledge of network hardware, ACLs, and firewall/router configuration.
• Strong understanding of computer security concepts and current threats.
• Effective communication skills and ability to interpret regulatory guidance.
• Advanced knowledge of network technologies and protocols.
• Must complete Joint Qualification Requirement training within 180 days of hire.

Security clearance: Must hold and maintain an active Secret clearance. US Citizenship required.

Physical demands include lifting up to 25 pounds, standing, walking, twisting, bending, and squatting.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: IT Services and Consulting