Information Security Analyst

Key2Source Inc; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading cybersecurity firm in Atlanta is seeking a skilled professional to manage security operations, focusing on monitoring enterprise systems and responding to incidents. The ideal candidate will have a strong knowledge of compliance frameworks and experience with key tools like Splunk and CrowdStrike. A Bachelor's degree in a relevant field is required, alongside hands-on experience in incident response and risk assessments. This role offers the opportunity to contribute significantly to enterprise security.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, IT, or related field.
• Hands-on experience with Splunk, CrowdStrike Falcon, and Tenable tools.
• Strong understanding of CUI protection and compliance frameworks.
• Experience in incident response, vulnerability management, and risk assessments.
• Excellent analytical, documentation, and communication skills.

Responsibilities

• Monitor enterprise systems for security incidents.
• Conduct vulnerability assessments and manage patch processes.
• Collaborate on incident response and recovery efforts.
• Develop security awareness programs.
• Develop and deliver security awareness and training for users.

Skills

Information Security

Cybersecurity

Analytical skills

Documentation

Communication skills

Incident response

Vulnerability management

Education

Bachelor’s degree in Information Security, Cybersecurity, IT, or a related field

Tools

Splunk

CrowdStrike Falcon

Tenable Nessus/Tenable.sc

Job description

Key Responsibilities

Security Operations & Monitoring

• Monitor enterprise systems using CrowdStrike Falcon (EDR), Splunk (SIEM), and Tenable (Vulnerability Management).
• Detect, investigate, and respond to threats, focusing on Controlled Unclassified Information (CUI) protection.
• Maintain dashboards, alerts, and reports for proactive risk detection and escalation.

Vulnerability & Risk Management

• Conduct vulnerability assessments using Tenable tools and track remediation efforts.
• Support patch management and configuration management to minimize risks.
• Provide metrics and updates on risk posture to leadership.

Compliance & Documentation

• Maintain and update System Security Plans (SSPs) to reflect security control implementations.
• Support internal and external audits (IRS, CMS, SSA, NIST, FISMA) with required documentation and evidence.
• Ensure adherence to evolving compliance frameworks (e.g., NIST SP 800-53 Rev. 5).

Incident Response

• Triage and analyze security incidents across enterprise systems.
• Collaborate with IT and business stakeholders on containment, eradication, and recovery.
• Deliver incident reports, root cause analyses, and lessons learned documentation.

Security Awareness & Training

• Develop and deliver targeted security awareness programs.
• Provide specialized training for privileged users and administrators.
• Track and report on training participation and effectiveness.

Reporting & Communication

• Generate actionable insights through Splunk dashboards, Tenable reports, and CrowdStrike summaries.
• Provide executive-level updates on risks, compliance, and incident trends.
• Track remediation activities and ensure timely resolution.

Required Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, IT, or a related field (or equivalent experience).
• Hands-on experience with Splunk, CrowdStrike Falcon, and Tenable Nessus/Tenable.sc.
• Strong understanding of CUI protection requirements and compliance frameworks (NIST, FISMA, IRS Pub 1075, CMS, SSA).
• Experience in incident response, vulnerability management, and risk assessments.
• Excellent analytical, documentation, and communication skills.
• Preference will be given to candidates with State of Georgia experience.