Endpoint Security Analyst - Tier 1

aspwebsolutions; Washington (Washington County); On-site; USD 52,000 - 80,000; Full time

Job summary

aspwebsolutions is seeking a junior-level contractor to provide security operations support in the Washington, D.C. area. Responsibilities include monitoring event logs, developing standard queries, and assisting with secure configurations across offices.

The role emphasizes QA on events, root cause analysis, and collaboration with multiple teams to improve endpoint security and incident response.

Qualifications

• Must be a US citizen to be eligible to apply for this position.
• Must be able to obtain secret clearance to be eligible to apply for this position.

Responsibilities

• Review event logs, develop standardized queries, and maintain these queries throughout their lifecycle.
• Quality assurance on events and escalations, including triage and root cause analysis.
• Lead in research and development of refinements and mitigations for security events.
• Serve as SME on Mobile Security, Vulnerability Management, Patch Management or Windows GPOs.
• Communicate and assist member offices in developing and deploying secure configuration settings.
• Collaborate with internal and external groups to prioritize and resolve findings to improve security.
• Provide technical responses and guidance on security features of systems.
• Contribute to Cybersecurity project plans with timely updates.

Skills

Event log analysis

Root cause analysis

Security configuration

Cross-team collaboration

Communication

Vulnerability management

Windows GPOs

Job description

Role/Office Location Options

Washington, D.C.

Requirements

• Must be a US citizen to be eligible to apply for this position.
• Must be able to obtain secret clearance to be eligible to apply for this position.

Job Description

Cybersecurity is looking to procure a qualified junior level Contractor(s) to provide security operations support. Tasks include:

• The ability to review event logs, develop standardized queries, collaborate with colleagues to develop handling instructions/standard operating procedures, perform cross-training, tune and perform continuous improvement, and maintain these queries throughout their lifecycle.
• The ability to handle quality assurance on events and escalations, including performing triage and root cause analysis on security events.
• Review existing security events and lead in the research and development of refinements and mitigations as necessary.
• Subject Matter Expert (SME) on one or more of the following: Mobile Security, Vulnerability Management, Patch Management, Windows GPOs
• Has the ability to communicate with and assist member offices in developing and deploying secure configuration settings and practices – and developing automated mechanisms to change and enforce configuration settings.
• Has the ability to work with groups both inside and outside of Cybersecurity to identify, determine feasibility, prioritize, track and resolve findings (configuration settings/software updates/etc.) to improve the security of the House.
• Serve as a trusted resource in providing technical responses and guidance on technical and procedural security features of a system.
• The ability to contribute to Cybersecurity project plans providing timely updates.
• The ability to communicate the status of the House endpoint security, to include developing, executing, documenting, and training repeatable organizational metrics.