Cybersecurity Operations Analyst (CSSP)

COLSA Corporation; Huntsville (AL); On-site; USD 70,000 - 100,000; Full time

Job summary

COLSA Corporation is seeking a Cybersecurity Operations Analyst (CSSP) to join an onsite Huntsville, AL team. You will monitor networks and assets, analyze potential compromises, and provide actionable remediation guidance to strengthen security controls across endpoints and infrastructure.

You will conduct investigations, support system accreditation activities, and participate in audits and vulnerability assessments. Strong communication and a proactive, adaptive mindset are essential.

Qualifications

• Bachelor’s degree or higher in a related field; 3 related certifications may substitute.
• Minimum 2 to 4 years of related experience.
• Active CompTIA Security+CE certification.
• Strong written and verbal communication skills.
• Ability to convey information to customers at varying technical levels.
• Comfort in a rapidly changing environment and learning new skills.

Responsibilities

• Monitor network and supporting systems to detect security compromises.
• Provide standard support for investigations and system accreditation maintenance.
• Identify deviations from configurations and policies.
• Recommend protections for networks, workstations, servers, and IT assets.
• Support audits to verify security policies and procedures.
• Assist with pre-test preparation, testing, and result reporting.
• Participate in passive and active evaluations (compliance audits and vulnerability assessments).

Skills

Cybersecurity operations

Threat analysis

Incident response

Communication skills

Customer interaction at varying levels

Education

Bachelor’s degree or higher

Tools

Tenable Nessus

PowerBI

Tableau

Office 365

Trellix

Microsoft Defender Endpoint

Job description

COLSA Corporation is looking for a Cybersecurity Operations Analyst (CSSP) to support mission-critical security monitoring and analysis on an onsite team in Huntsville, AL. In this role, you will help detect cyber incidents, analyze potential compromise events, and provide practical recommendations to correct findings across networks, workstations, servers, and other IT assets.

What you’ll do

• Monitor network and supporting systems to detect security compromise events, including intrusions and virus incidents.
• Provide standard support for processes, investigations, and system accreditation maintenance.
• Identify deviations from acceptable configurations, enclave policy, or local policy.
• Recommend protections for networks, workstations, servers, and other IT assets.
• Support audits to verify that information system security policies and procedures are implemented as defined in security plans and best practices.
• Assist with formal testing requirements, including pre-test preparation, participation in tests, analysis of results, and reporting.
• Participate in passive evaluations (compliance audits) and/or active evaluations (vulnerability assessments).

What you bring

• Bachelor’s degree or higher in a related field (minimum of 3 related certifications may be used in place of academic field).
• Minimum 2 to 4 years of related experience.
• Active CompTIA Security+CE certification.
• Strong written and verbal communication skills.
• Ability to communicate and present information to customers at varying technical levels.
• Comfort working in a constantly adapting environment, including learning new skills and adjusting priorities.
• Basic knowledge of Computer Network Defense, including IDS/IPS, network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities.
• Basic knowledge of vulnerability and risk management, including risk/severity-based prioritization and decision making.
• Familiarity with encryption technology, penetration and vulnerability analysis, and information technology security research.
• US Citizenship Required; ability to obtain interim Secret Clearance prior to start date.

Helpful (preferred) experience

• Active Secret clearance.
• CySA+ or CEH certification.
• Experience analyzing alerts using PCAPs and/or cloud logs, including understanding network threats and defense methods.
• Professional proficiency with Office 365.
• Experience with vulnerability scanning solutions such as Tenable Nessus.
• Experience using presentation and automation tools such as PowerBI or Tableau.
• Experience assessing STIG findings.
• Experience with endpoint security solutions such as Trellix or Microsoft Defender Endpoint.

Relevant technologies

• CompTIA Security+CE
• Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS)
• Packet capture analysis, network flow analysis, network proxy operation
• Firewalls, anti-virus capabilities
• Encryption technology