Cybersecurity Operations Analyst (CSSP)

Colsa-5; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

401(k) with company match

Paid Time Off

Job summary

COLSA Corporation is seeking a Cyber Operations Analyst to monitor systems, analyze network data, and provide remediation recommendations for security incidents. The role includes producing monthly security posture reports and coordinating with customers and operations teams to mitigate high-risk findings.

Required are a related degree with 5+ years of experience, active Security+ certification, and strong communication skills. U.S.

Qualifications

• Bachelor's degree or higher in a related field (minimum of 3 related certificationsmaybe used in place of related academic field)
• Minimum of 5 years of related experience
• Active CompTIA Security+CE certification
• Strong written and verbal communication skills
• Ability to communicate and present information to customers at varying levels of technical detail
• Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities
• Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities
• Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making
• Familiar with encryption technology, penetration, and vulnerability analysis of various security technologies, and information technology security research
• US Citizenship Required;Active Secret Clearance

Responsibilities

• Analyzes network data using packet capture analysis, network flow analysis, as well as Cloud Logs to identify and report on potential security incidents
• Assists customers with remediation of a wide range of cybersecurity issues including vulnerabilities, misconfigurations, cyber incidents, and non-compliance
• Provides analysis, recommendations, and verification to achieve acceptable mitigation of security incidents
• Generates and publishes monthly reports providing customers with a summary of their cyber security posture as well as tracking customers with consistent issues
• Conducts daily review of open vulnerabilities using both Network and Endpoint based security solutions, reporting on high risk findings and tracking mitigation efforts until resolved
• Enforces endpoint quarantine policies on extremely high risk devices using Endpoint Security Solution
• Assists customers in preparing for upcoming cyber security posture assessments by providing overview of topics covered by assessment, and coordinating with customer and other operational teams to mitigate potential high risk findings observed on the site's network

Skills

Communication skills

Analytical thinking

Adaptability

Team collaboration

Education

Bachelor's degree or higher

Tools

Tenable Nessus

PowerBI

Tableau

Microsoft Defender Endpoint

Trellix

Job description

General Summary:
COLSA Corporation is hiring for a Cyber Operations Analyst. You will be responsible for performing system monitoring and analysis support for the detection of cyber incidents and provides recommendations on how to correct findings.

Principal Duties and Responsibilities (*Essential Functions):

• Analyzes network data using packet capture analysis, network flow analysis, as well as Cloud Logs to identify and report on potential security incidents.
• Assists customers with remediation of a wide range of cybersecurity issues including vulnerabilities, misconfigurations, cyber incidents, and non-compliance.
• Provides analysis, recommendations, and verification to achieve acceptable mitigation of security incidents.
• Generates and publishes monthly reports providing customers with a summary of their cyber security posture as well as tracking customers with consistent issues.
• Conducts daily review of open vulnerabilities using both Network and Endpoint based security solutions, reporting on high risk findings and tracking mitigation efforts until resolved.
• Enforces endpoint quarantine policies on extremely high risk devices using Endpoint Security Solution.
• Assists customers in preparing for upcoming cyber security posture assessments by providing overview of topics covered by assessment, and coordinating with customer and other operational teams to mitigate potential high risk findings observed on the site's network.

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits

Required Experience

Required Qualifications

• Bachelor's degree or higher in a related field (minimum of 3 related certificationsmaybe used in place of related academic field)
• Minimum of 5 years of related experience
• Active CompTIA Security+CE certification
• Strong written and verbal communication skills
• Ability to communicate and present information to customers at varying levels of technical detail
• Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities
• Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities
• Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making
• Familiar with encryption technology, penetration, and vulnerability analysis of various security technologies, and information technology security research
• US Citizenship Required;Active Secret Clearance

Preferred Qualifications

• CySA+ or CEH certification
• Experience analyzing alerts using PCAPs and/or cloud logs, as well as an understanding of network threats, potential network exploitation, and methods to defend against potential malicious activity
• Proficiency in Office 365 tools at a professional level
• Experience using vulnerability scanning solutions such as Tenable Nessus
• Experience using data presentation/automation tools such as PowerBI or Tableau
• Experience assessing Security Technical Implementation Guide (STIG) findings
• Experience working with Endpoint Security Solutions such as Trellix or Microsoft Defender Endpoint
• Experience handling risk/severity-based prioritization and decision making

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Salary Type

Annually

The salary range, if referenced, represents a good faith estimate. COLSA considers various factors when determining base salary offers, but not limited to, location, the role, function and associated responsibilities, a candidate’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements.

COLSA offers a comprehensive and customizeable benefits program which includes

• Medical
• Dental
• Vision
• Life Insurance
• Short-Term Disability
• Long-Term Disability
• Accidental Death & Dismemberment
• Supplemental Income Protection Programs
• 401(k) with company match
• Flexible Spending Accounts
• Employee Assistance Program
• Education & Certification Reimbursement
• Employee Discount Program
• Paid Time Off
• Holidays

This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.