Senior Cyber Security Analyst

Ampcus Inc; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Job summary

Ampcus Inc is seeking a Senior Cyber Security Analyst based in Washington, DC. The role involves administration of deployed cyber control technologies within the Security Operations Center (SOC). Key responsibilities include monitoring, analyzing, and responding to cyber incidents across IT and Operational Technology networks.

The ideal candidate will have a Bachelor’s degree and at least 5 years of experience in Information Systems. Strong skills in risk mitigation and knowledge of cybersecurity tools are essential. Ampcus offers a supportive working environment.

Qualifications

• Minimum 5 years of experience in Information Systems.
• Strong understanding of key functions of cybersecurity and cyber risk mitigation strategies.
• Familiarity with NIST 800-53 Control Families.

Responsibilities

• Administer deployed cyber control technologies within SOC.
• Monitor SOC operations to detect and respond to cyber incidents.
• Conduct vulnerability and penetration testing on IT and OT systems.

Skills

Cybersecurity Tools & Technologies

Information Security

Access Control

Incident Response

Adaptable & Agile

Attention to Detail

Analytical & Problem-Solving Skills

Teamwork

Communication Skills

Education

Bachelor’s degree in Information Systems, Computer Science, or related technical field

Tools

PowerShell

KQL

Python

Job description

Senior Cyber Security Analyst

Location: Washington, DC

Summary

The intent of this job description is to provide a representative summary of the major duties, locations, and responsibilities performed by incumbent(s) in this job. Incumbent(s) may not be required to perform all duties in this description, and incumbent(s) may be required to perform work‑related tasks other than those specifically listed in this description. This job description is not a “contract” between the employee and the Authority. The job duties and essential functions may be changed at the discretion of the General Manager.

Role Description

The Senior Cyber Security Analyst is responsible for the administration of deployed cyber control technologies. The role is part of the Security Operations Center (SOC) which monitors, analyzes, detects, and responds to cyber incidents on both traditional IT and Operational Technology (OT) networks. The role coordinates with both the Information Technology (IT) team and Operational Team (OT) to ensure individuals have the appropriate access to resources, monitor vulnerabilities and threats, collects intelligence, assists in disaster recovery operations, and in updating cyber controls with intelligence obtained from third‑party providers. This role is also responsible for the identification of IT assets supporting business processes.

Responsibilities

• Supports the Director, Cyber Security Services, in ensuring preparedness to address cyber risks.
• Maintains user access controls for computing resources.
• Monitors SOC operations to detect, analyze, and respond to cyber incidents, including intrusion attempts, malware infections, and other security threats, across IT and OT networks.
• Analyzes security events and incidents within the Computing and Network environment, investigating root causes, assessing impact, and coordinate and document response actions to mitigate risks and minimize operational disruptions.
• Tests, implements, deploys, maintains, reviews, and administers the infrastructure software required to effectively manage the network defenses and resources.
• Monitors network to actively remediate unauthorized activities.
• Assists in disaster recovery operations, using preparation, identification, mitigation, remediation, and recovery approaches, as needed to maximize business resilience and information security.
• Collaborate with the Director, Cyber Security Services, to incorporate threat intelligence obtained from third‑party providers into Cyber Controls, enhancing the ability to proactively identify and mitigate emerging threats.
• Conducts and reports outcomes of vulnerability and penetration testing on IT and OT systems, identifying and prioritizing vulnerabilities for remediation to reduce the risk of exploitation by malicious actors.
• Uses advanced threat hunting techniques and tools to identify and neutralize threats before they escalated.
• Documents security incidents, investigations, and response activities in accordance with established procedures, ensuring accurate and thorough reporting for compliance, audit, and legal purposes.
• Determines deviations from acceptable configuration, vendor, or IT Policy.
• Generates security metrics, dashboards, and reports to provide visibility into key cybersecurity performance indicators, trends, and emerging risks for the senior executive team.
• Oversee the receipt and distribution of IT assets owned, leased, or subleased to IT and OT, including creation and maintenance of supporting documentation to manage the acquisition and disposal of IT assets.
• Continuously assesses and improves cybersecurity capabilities, processes, and procedures, leveraging lessons learned, industry best practices, and emerging technologies to enhance overall cyber resilience and readiness.

Key Working Relationships

Works with the Information Technology Solution Center (ITSC) and Infrastructure teams to enable the delivery and disposal of computing and network assets. Maintains and manages Role‑Based Access to the Information Technology Asset Management Database. Partners with internal stakeholders to understand and logically document current and future processes.

Skills & Qualifications

Required Experience

• Minimum 5 years of experience in Information Systems.
• Strong understanding of the key functions of cybersecurity, cyber risk mitigation strategies, and event and incident flows within a Security Event and Incident (SEIM) system.
• Ability to define the problem, generate and select alternatives, and implement solutions.
• Intermediate understanding of MITRE and Adversarial Tactics, Techniques and Common Knowledge (Telecommunication & CK) framework for Information Technology and Operational Technology Networks.
• Strong understanding of one or more computer programming and/or scripting languages (PowerShell, KQL, Python, etc.).
• Intermediate understanding of network ports, protocols, and services, host and network‑based Intrusion Prevention Systems (IPS).
• Advanced understanding of system and network logging events.
• Familiarity with the National Institute of Standards and Technology NIST 800‑53 Control Families and the NIST Cyber Incident Response steps.

Minimum Education Requirements

A Bachelor’s degree in Information Systems, Computer Science, or a related technical field from an accredited college or university.

Required Skills

• Cybersecurity Tools & Technologies
• Information Security
• Access Control
• Incident Response
• Adaptable & Agile
• Attention to Detail
• Analytical & Problem‑Solving Skills
• Teamwork
• Communication Skills

Required Licenses & Certifications

None

Required Languages

English

Physical Requirements

General Office Conditions

Preferred Skills & Qualifications

Experience in cybersecurity incident response and network security monitoring and must be proficient in using technology tools such as Check Point, Azure, Microsoft Entra, Defender, and Purview.

Preferred Education Requirements

Master’s degree in cybersecurity, information technology security, computer engineering, computer information systems, computer science or related field from an accredited college or university.

Preferred Licenses or Certifications

Certifications in cybersecurity, such as a CompTIA Security, GIAC Certifications, or similar.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.