Security Analyst

Take2 Consulting, LLC; Herndon (VA); Sur place; USD 70 000 - 100 000; Plein temps

Résumé du poste

Take2 Consulting, LLC seeks a Security Analyst to monitor TSA SIEM events in Chantilly/Herndon, 24x7, and investigate incidents. You will document findings and coordinate with ticket systems to track investigations, supporting critical national security operations.

The role requires a Bachelor's degree, Security+ certification, and hands-on experience with SIEM tools like Splunk/CrowdStrike, plus SOC environment work. On-site duties at Chantilly/Herndon with a dynamic team are expected.

Qualifications

• 1 year of cybersecurity experience required.
• Proficiency with Splunk, Trellix or CrowdStrike in SOC operations.
• Experience with SIEM platforms and security monitoring.
• Bachelor's Degree in related field or equivalent experience.
• Minimum Security+ certification.

Responsabilités

• Monitor and analyze security events and alerts from the TSA SIEM 24x7 to identify malicious activity.
• Investigate security incidents, discern legitimate threats, and document findings.
• Work with ticket management systems to track security investigations and incident reports.
• Monitor the operational status of security components and escalate outages as necessary.
• Analyze security event logs from Windows, macOS, and Linux.
• Review network communications and routing protocols to identify anomalies or malicious activities.
• Implement counter-measures and mitigation controls within enterprise networks to enhance security.

Connaissances

Cybersecurity experience

SOC experience

SIEM proficiency

Analytical skills

Formation

Bachelor's Degree

Outils

Splunk

Trellix

CrowdStrike

Elastic

Sentinel

Windows Active Directory

Description du poste

We are seeking a dedicated Security Analyst to join our team supporting TSA operations in Chantilly/Herndon. This role involves monitoring and analyzing security events reported by the TSA SIEM to identify and investigate suspicious or malicious activity. The ideal candidate possesses strong organizational skills, technical expertise in cybersecurity, and experience working in a dynamic, 24/7 security environment. This opportunity offers a chance to contribute to critical national security efforts with a reputable agency.

Education Requirements

Bachelor's Degree

Certification Requirements

Security +

Work Arrangement

On-Site at Chantilly/Herndon

Responsibilities

• Monitor and analyze security events and alerts from the TSA SIEM 24x7 to identify malicious activity.
• Investigate security incidents, discern legitimate threats, and document findings.
• Work with ticket management systems to track security investigations and incident reports.
• Monitor the operational status of security components and escalates outages as necessary.
• Analyze security event logs from various operating systems including Windows, macOS, and Linux.
• Review network communications and routing protocols to identify anomalies or malicious activities.
• Implement counter-measures and mitigation controls within enterprise networks to enhance security.

Required Qualifications

• 1 year of experience in cybersecurity, with proficiency in Splunk, Trellix, CrowdStrike, or similar endpoint detection tools.
• Experience working with security information and event management (SIEM) platforms.
• Knowledge of network communication protocols such as TCP, UDP, ICMP, BGP, MPLS.
• Ability to analyze security event logs to identify potential threats.
• Strong organizational and analytical skills with attention to detail.
• Experience working in a Security Operations Center environment.
• Bachelor's Degree in a related field or equivalent experience.
• Minimum of Security+ certification.

Desired Skills

• Experience with Elastic, Sentinel, or similar security tools.
• Familiarity with Windows Active Directory and enterprise network environments.
• Knowledge of incident response procedures and security counter-measures.

Pay Range

Pay range: $70,000.00–$100,000.00 (annual).

This pay range is based on qualifications and experience, and assumes all role requirements are met.