cyber security analyst

Naufar

<div>
 <p>
  <strong>
   JOB PURPOSE:
  </strong>
 </p>
 <p>
  The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Description
  </strong>
 </p>
 <ul>
  <li>
   Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
  </li>
  <li>
   Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
  </li>
  <li>
   Develops, Contributes and maintains of the cyber security strategy.
  </li>
  <li>
   Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
  </li>
  <li>
   Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
  </li>
  <li>
   Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
  </li>
  <li>
   Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
  </li>
  <li>
   Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
  </li>
  <li>
   Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
  </li>
  <li>
   Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
  </li>
  <li>
   Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
  </li>
  <li>
   Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
  </li>
  <li>
   Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
  </li>
  <li>
   Performs post-incident report according to standard operations.
  </li>
  <li>
   Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
  </li>
  <li>
   Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
  </li>
  <li>
   Develops focused reporting and briefings for advanced cyber threats.
  </li>
  <li>
   Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
  </li>
  <li>
   Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
  </li>
  <li>
   Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
  </li>
  <li>
   Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
  </li>
  <li>
   Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
  </li>
  <li>
   Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
  </li>
  <li>
   Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
  </li>
  <li>
   Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
  </li>
  <li>
   Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
  </li>
  <li>
   Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Academic Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree &ndash; IT - Mandate
  </li>
  <li>
   Master&rsquo;s degree &ndash; Cybersecurity - Desired
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience Requirements:
  </strong>
 </p>
 <ul>
  <li>
   5+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
  </li>
  <li>
   Demonstrated experience in threat detection and analysis, incident response, and reporting.
  </li>
  <li>
   Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
  </li>
  <li>
   Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
  </li>
  <li>
   Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
  </li>
  <li>
   Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
  </li>
  <li>
   Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
  </li>
  <li>
   Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
  </li>
 </ul>
</div>


Cyber Security Analyst

Town Pump

<div><p>The Cyber Security Analyst is responsible for protecting an organization&rsquo;s system against advanced persistent threats from cyberspace. Acting under limited supervision of a senior team member, this position examines information to help identify risks and threats then recommends and helps implement strategies to stop those threats from adversely affecting the company&rsquo;s network, systems or property. In this role, you will work under a senior team member to develop your skills and learn more about the tools and techniques used to be more effective in your job.</p><p></p><p><b><br>
ESSENTIAL DUTIES AND RESPONSIBILITIES:</b></p><ul><li>
Understand cyber security methodologies</li><li>
Participate in technical design reviews, integration, testing, and documentation work</li><li>
Participate in audit support activities, as they pertain to Cybersecurity, Physical Security, and Identity &amp; Access Management for both internal and external audits.</li><li>
Identify and report any cyber-attacks and participate in any resulting investigation as needed</li><li>
Enforcement of policies, procedures, and associated plans for system security administration based on industry-standard best practices.</li><li>
Work closely with other departments on corporate technology development to fully secure information, computer, network, and processing systems</li><li>
Remain informed on trends and issues in the security industry, including current and emerging technologies and policies</li><li>
Communicate effectively with management, peers, staff, and customers both inside and outside the corporation.</li><li>
Help staff with the use of the company systems, providing security training where necessary.</li></ul><p></p><p><b><br>
NON-ESSENTIAL DUTIES</b>:</p><ul><li>
Other duties as assigned by management</li></ul><p></p><p><b><i><br>
Job Specifications</i></b> <b>(Qualifications)</b></p><p><b>
Qualification Requirements: </b>To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><p></p><p><b><br>
EDUCATION and/or EXPERIENCE: </b>Bachelor's degree (B. A.) from four-year college or university; or one to two years related experience and/or training; or equivalent combination of education and experience. Experience with and knowledge of hardware and software, networks, data centers, systems and other related arenas related to cyber security.</p><p></p><p><b><br>
LANGUAGE SKILLS: </b>Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.</p><p></p><p><b><br>
MATHEMATICAL SKILLS: </b>Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume. Ability to apply concepts of basic algebra and geometry.</p><p></p><p><b><br>
REASONING ABILITY: </b>Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram, or schedule form.</p><p></p><p><b><br>
REQUIRED CERTIFICATES, LICENSES, REGISTRATIONS:</b></p><ul><li>
Valid Driver&rsquo;s License with acceptable driving record</li></ul><p></p><p><b><br>
OTHER SKILLS and ABILITIES:</b></p><ul><li>
The ability to work well in a team environment and be capable of building and maintaining positive relationships with other staff, departments, and customers.</li><li>
Understanding of the OSI (Open Systems Interconnection) model and common ports and services</li><li>
Low-level networking experience with the TCP/IP (Transmission Control Protocol/Internet Protocol) stack</li><li>
Knowledge of PCI standards and CIS (or other) Frameworks</li><li>
Possess the ability to communicate complex and technical concepts to a non-technical, general audience.</li><li>
Data analyst skills, etc.</li></ul><p></p><p><b><br>
PHYSICAL DEMANDS:</b> The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><ul><li>
The employee must occasionally lift and/or move up to 25 pounds.</li><li>
While performing the duties of this job, the employee is regularly required to talk or hear. The employee is frequently required to sit. The employee is occasionally required to stand; walk; use hands to handle, or feel; and reach with hands and arms.</li></ul><p></p><p><b><br>
ENVIRONMENTAL DEMANDS:</b> The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions<b>.</b></p><ul><li>
The noise level in the work environment is usually moderate.</li></ul></div>

CYBER SECURITY ANALYST 1

Covius

<div>
 It's fun to work in a company where people truly BELIEVE in what they're doing!
 <br/>
 <br/>
 <em>
  We're committed to bringing passion and customer focus to the business.
  <br/>
  <br/>
 </em>
 The Cyber Security Analyst is responsible for contributing to, and strengthening, the Information Security function and role throughout the organization. The Analyst will update, document and maintain security standards and policies for the organization. The Analyst will help in the identification, analysis and reporting of cyber threats in addition to ensuring business operations are conducted in accordance with established guidelines and regulatory requirements.
 <br/>
 <br/>
 <strong>
  Essential Functions
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Monitor, triage, investigate, and resolve security alerts, support tickets, and incidents, including containment, root cause analysis, chain of custody, and preventive actions
  </li>
  <li>
   Identify security risks, recommend remediation or mitigating controls, and support ongoing risk assessments and system testing
  </li>
  <li>
   Apply and enforce information security policies, standards, and procedures, aligning with industry best practices and regulatory requirements (e.g., PCI, GLBA)
  </li>
  <li>
   Support integration of regulatory and audit requirements into the security roadmap and ensure the Company&rsquo;s computer systems meet compliance obligations
  </li>
  <li>
   Collaborate with IT Operations to ensure servers, network devices, and security controls meet established security standards and are working as designed
  </li>
  <li>
   Evaluate, implement, and perform compliance assessments on application, system, and security-related changes and solutions, adhering to established change control processes
  </li>
  <li>
   Perform periodic internal security audit functions on IT operational controls, to include system access, DLP controls, firewall policies, etc.
  </li>
  <li>
   Stay current with evolving security technologies and maintain relevant certifications
  </li>
  <li>
   Participate in on-call rotation
  </li>
  <li>
   Perform other related duties as assigned
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Essential Knowledge, Skills, And Abilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Familiarity with various cyber threats and mitigating controls
  </li>
  <li>
   Familiarity with various endpoints security solutions, email security solutions, security monitoring tools and appliances
  </li>
  <li>
   Solid understanding of the OSI network model and network protocols such as TCP/IP, firewalls, proxies, IDPS concepts
  </li>
  <li>
   Knowledge of security-oriented regulatory requirements and compliance a plus
  </li>
  <li>
   Knowledge of the mortgage industry is helpful, but not required
  </li>
  <li>
   Ability to work effectively, independently and with others in a collaborative, deadline-sensitive environment
  </li>
  <li>
   Able to effectively communicate both verbally and in writing to accurately convey messages with both technical and non-technical users
  </li>
  <li>
   Commitment and ability to cultivate a diverse and inclusive work environment.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Education
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in computer science, Engineering or Information Systems Security is preferred
  </li>
  <li>
   Security training certifications strongly preferred (Security+, Azure Fundamentals, Network+)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Previous experience as an IT security specialist (1-3 years)
  </li>
  <li>
   Experience working in IT (5+ years)
  </li>
  <li>
   Experience as a security specialist in a regulated IT environment including some combination of SOX, HIPAA, GLBA, PCI (1+ years)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Compensation And Benefits
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Covius offers an extensive benefits package for all employees, including medical, dental, vision and 401(k)!
  </li>
  <li>
   Compensation $70,000 - $87,500 annualized with a 5% AIP opportunity
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Application Guidelines
  <br/>
  <br/>
 </strong>
 For best consideration, please submit your resume and application materials as soon as possible. Review of applications will begin immediately.
 <br/>
 <br/>
 <strong>
  Working Conditions
  <br/>
  <br/>
 </strong>
 This position follows a hybrid work model, combining remote work with in-office presence. Employees are expected to maintain a professional home office environment and be available to work on-site as scheduled or as business needs require. Work is performed both remotely and in a standard office setting. Flexible work hours may be available, with expectations to attend meetings and collaborate during core business hours. Reliable internet access is required for remote work, along with the ability to be on camera to participate in virtual meetings and communications. During in-office days, work is performed in a climate-controlled office with standard lighting and noise levels. Employees must comply with company policies regarding data security, time tracking, and collaboration tools across both work environments.
 <br/>
 <br/>
 <strong>
  Physical Demands and Activities
  <br/>
  <br/>
 </strong>
 While performing the duties of this job, the employee is frequently required to communicate. The employee is regularly required to stand, walk, sit, and constantly operate a computer and other office equipment using hands and fingers for fine manipulation, including keyboarding and mouse use. The employee must occasionally lift, carry, push, pull, or otherwise move objects, such as files and small parcels and/or move boxes weighing up to 15 lbs. Prolonged periods of sitting or standing may be required depending on the nature of the work. Specific vision abilities required by this job include close vision, distance vision, and the ability to observe objects at close range in presence of glare or bright lighting (e.g. computer screen).
 <br/>
 <br/>
 <em>
  Covius is committed to equal opportunity in all employment practices to all qualified applicants and employees without regard to race, color, religion, gender, gender identity, age, national origin, pregnancy, disability, genetics, marital status, military or veteran status or any other protected category as established by local, state, and federal law. This policy applies to all aspects of the employment relationship including recruitment and hiring, placement, promotion, transfer, compensation, disciplinary action, layoff, leaves of absence, training, and termination. All such employment decisions will be made without unlawful discrimination based on any prohibited basis.
  <br/>
  <br/>
 </em>
 <em>
  The essential functions, working conditions and physical demands described above are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.
  <br/>
  <br/>
 </em>
 <em>
  Please note that all job descriptions are not intended to be all-inclusive. This job description is not designed to cover all activities, duties or responsibilities that are required of the employee for this job. Employees may be required to perform other duties at any time with or without notice to meet the ongoing needs of the organization.
  <br/>
  <br/>
 </em>
 <em>
  If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
 </em>
</div>


MANTECH

<div><p><b>MANTECH</b> seeks a motivated, career and customer-oriented <b>Cyber Security Analyst</b> to support our operations in <b>Virginia Beach, VA</b>. This is an <b>onsite</b> position.</p><p></p><p>
In this role, you will be involved in securing critical defense systems by applying rigorous Risk Management Framework (RMF) standards. You will work closely with stakeholders to ensure that cybersecurity architecture and controls meet the highest levels of integrity and compliance.</p><p></p><p><b>
Responsibilities include but are not limited to:</b></p><ul><li><p>
Prepare for RMF execution by defining authorization boundaries, performing system categorization, and applying NIST SP 800-53 security control overlays.
</p></li><li><p>Lead the selection and tailoring of security controls, documenting all risk-based justifications and decisions within the Enterprise Mission Assurance Support Service (eMASS).
</p></li><li><p>Develop and maintain essential cybersecurity documentation, including the System Security Plan (SSP), Contingency Plans, and Incident Response Plans.
</p></li><li><p>Implement and test security controls using DISA STIGs, SRGs, and ACAS/Nessus vulnerability scans to ensure full-scope compliance across all assets.
</p></li><li><p>Assess the effectiveness of security implementations by conducting independent testing and documenting findings to resolve non-compliant controls through the POA&amp;M process.
</p></li><li><p>Support the system authorization process by managing RMF accreditation packages and coordinating formal workflow actions for Authorizing Official (AO) decisions.
</p></li><li><p>Execute continuous monitoring strategies, including monthly vulnerability scans and annual security reviews, to maintain an acceptable system risk posture.</p></li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li><p>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field with 2+ years of relevant work experience</p></li><li><p>
DoD 8570 IAT Level II Certification, e.g., Security+</p></li><li><p>
Proficiency in utilizing eMASS to manage security control documentation and POA&amp;Ms</p></li><li><p>
Experience conducting vulnerability assessments using ACAS tool suite</p></li><li><p>
2+ years of direct RMF experience</p></li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li><p>
DOD 8140 Cyber Workforce certification</p></li></ul><p></p><p><b>
Security Clearance:</b></p><ul><li><p>
Must have a current/active DOD Secret Security Clearance</p></li></ul><p></p><p><b>
Physical Requirements</b>:</p><ul><li><p>
The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.</p></li></ul></div>

Digital Check

<div><div><div><div><div><b>Summary of Position:</b></div><div></div><div><b><br>
Digital Check Corp.</b> is the world's leading manufacturer of check scanners and a technology company that provides world-class solutions in check processing, microfilm reading/conversion, and cash handling automation software. As the <b>Cyber</b> <b>Security Analyst</b>, you will be a critical part of our IT team, responsible for monitoring, maintaining, and continually advancing the security posture of our enterprise systems and data. This is a hands-on role focusing on both daily operations and strategic security policy advancement, with a strong emphasis on the Microsoft security stack and compliance, including our SOC 2 Type 2 certification efforts.</div></div></div><div></div><div><div><div><b><br>
Principal Duties and Responsibilities</b><b>:</b></div><div></div><div><b><br>
Security Operations and Monitoring</b></div><ul><li>
Review Windows Defender and Suricata Logs Daily to proactively identify, investigate, and triage potential security incidents and anomalies.</li><li>
Manage Security Related tickets and maintain diligence to stay on top of updating, escalating, and closing them in a timely manner.</li><li>
Conduct daily reviews of AI usage logs across the enterprise in Microsoft to ensure compliance with acceptable use policies and identify potential data risks.</li><li>
Assist in incident response activities, providing detailed analysis and documentation.</li></ul><div><ul><li>
Perform in-depth investigations into insider threat incidents, working closely with business leaders.</li></ul></div><ul><li>
Conduct Red Team Assessments and Penetration Tests. Ensure vulnerabilities are remediated in a timely manner.</li><li>
Create PowerShell and KQL scripts within Azure Sentinel and Office 365.
</li></ul><div><b>Security Policy and Administration</b></div><ul><li>
Maintain and update Windows Defender Policies across the organization's endpoints to ensure robust protection.</li><li>
Review and maintain Conditional Access Policies within Microsoft to enforce Zero Trust principles and secure access to resources.</li><li>
Establish Identity &amp; Access Management controls to govern, monitor, and audit privileged access.</li><li>
Update AI related safeguards</li></ul><div><ul><li>
Refine detection capabilities by creating and optimizing rules, alerts, and risk scoring models.</li></ul></div><div><b>
Governance, Risk, and Compliance (GRC)</b></div><ul><li>
Manage Vendor Security by performing due diligence, assessing third-party risks, and tracking vendor compliance.</li><li>
Play a key role in conducting SOC 2 Type 2 audits and other regulatory compliance efforts by gathering evidence, documenting controls, and coordinating with auditors.</li><li>
Establish security best practices and create formal documentation, policies, and procedural guides.</li><li>
Provide training through Knowbe4 to educate employees and users on cybersecurity best practices.</li></ul><div></div><div><b><br>
Security Architecture and Improvement</b></div><ul><li>
Implement Security Changes in infrastructure, applications, and processes, ensuring security is integrated early in the design lifecycle.</li><li>
Advance our usage of Microsoft DLP (Data Loss Prevention) capabilities to protect sensitive and confidential data across the enterprise.</li><li>
Demonstrate a strong understanding of Network Segmentation, firewall rules, SSO (Single Sign-On), and MFA (Multi-Factor Authentication) to implement and maintain a secure network architecture.</li><li>
Define metrics and reporting frameworks to measure the effectiveness of the security program.</li></ul></div></div><div></div><div><div><div><b><br>
Knowledge, Skills and Abilities Required</b><b>:</b></div><div></div><div><b><br>
Required Skills &amp; Experience</b></div><ul><li>
2+ years of experience as a Security Analyst or in a similar security-focused role.</li><li>
Hands-on experience with Microsoft 365 security tools, including Microsoft Defender, Conditional Access, Sentinel, and Data Loss Prevention (DLP).</li><li>
Proficiency with PowerShell and KQL scripting.</li><li>
Direct experience with log analysis from security tools such as Suricata, Defender, and SIEM/SOAR platforms.</li><li>
Familiarity with compliance frameworks, particularly those relevant to financial services technology or manufacturing (e.g., SOC 2, ISO 27001).</li><li>
Solid foundational knowledge of networking protocols, firewalls, and network segmentation concepts.</li><li>
Experience in vendor security management and risk assessment.</li></ul><div><b>
Preferred Qualifications:</b></div><ul><li>
Relevant security certifications (e.g., CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals, or similar).</li><li>
Experience with Privileged Access Management (PIM) solutions.</li><li>
Experience working in an environment that requires a high degree of physical and digital security due to handling financial or proprietary data.</li></ul></div></div><div></div><div><div><div><b><br>
Personal Skills and Competencies:</b></div><br>
<div></div><ul><li>
Excellent written and verbal communication skills to articulate complex security concepts to technical and non-technical stakeholders.</li></ul></div></div><div></div><div><div><div><b><br>
Customer Base:</b></div><br>
<div></div><ul><li>
Financial organizations and retailers</li></ul></div></div><div><div><br>
The above is not intended to be an all-inclusive list of the duties and responsibilities of the job described, nor is it intended to be an exhaustive list of the skills and abilities required to do the job. Rather, it is intended only to describe the general nature of the job. Employees may be required to perform duties outside of their normal responsibilities from time to time, as needed.</div></div></div></div><div></div>

SouthEast Alaska Regional Health Consortium (SEARHC)

<div>
 <strong>
  Pay Range
  <br/>
  <br/>
 </strong>
 Pay Range:$38.93 - $54.76
 <br/>
 <br/>
 SEARHC is a non-profit health consortium which serves the health interests of the residents of Southeast Alaska. We see our employees as our strongest assets. It is our priority to further their development and our organization by aiding in their professional advancement.
 <br/>
 <br/>
 Working at SEARHC is more than a job, it&rsquo;s a fulfilling career. We offer generous benefits, including retirement, paid time off, paid parental leave, health insurance, dental, and vision benefits, life insurance and long and short-term disability, and more.
 <br/>
 <br/>
 <strong>
  Key Essential Functions And Accountabilities Of The Job
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Assist in identifying and defining system security requirements.
  </li>
  <li>
   Assist and collaborate with the engineering team in the design of computer and network services for ensuring proper security compliance.
  </li>
  <li>
   Prepare and document standard operating procedures and protocols under the guidance of the CISO and VP of Information Technology.
  </li>
  <li>
   Assist in configuring and troubleshooting security infrastructure devices, systems, and services.
  </li>
  <li>
   Support the development of technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
  </li>
  <li>
   Assist in mitigation, remediation, and documentation of cyber security incidents.
  </li>
  <li>
   Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Education,
 </strong>
 <strong>
  Certifications, and Licenses Required
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Cyber Security, Computer Science, Information Technology, or a related field or four years of relevant experience may exchange for a degree.
  </li>
  <li>
   Relevant professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Ethical Hacker (CEH) preferred.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience Required
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Hands-on experience in systems, networking, firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Knowledge of
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Technical knowledge of service systems and operating system security.
  </li>
  <li>
   Familiarity with network security and networking technologies and network operating systems as it relates to security, monitoring, auditing.
  </li>
  <li>
   Thorough understanding of the latest security principles, techniques, and protocols.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills In
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Problem-solving skills and the ability to work under pressure.
  </li>
  <li>
   Excellent written and verbal communication skills.
  </li>
  <li>
   Strong attention to detail.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Ability to
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work collaboratively with the IT operations, networking, and systems teams.
  </li>
  <li>
   Learn quickly and adapt to changing technologies, techniques, and procedures used by threat actors.
  </li>
  <li>
   Maintain confidentiality and act with discretion.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Travel Required
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Occasional travel may be required for this position.
  </li>
  <li>
   Travel is by jet, small aircraft, and ferry.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Certifications
  <br/>
  <br/>
 </strong>
 <em>
  If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
 </em>
</div>


SES Corporation

<div>
 This role supports the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for a Cyber Security Analyst.
 <br/>
 <br/>
 <strong>
  Location:
 </strong>
 This position will be hybrid remote. Candidates will be required to work onsite as needed. Preferred candidates will be located near Hanscom AFB (Boston, MA).
 <br/>
 <br/>
 <strong>
  Responsibilities:
  <br/>
  <br/>
 </strong>
 The
 <strong>
  Cyber Operations Enginee
 </strong>
 r will provide Incident Response (IR) and security operations support for the USAF Cloud One (C1) enterprise cloud environment supporting AWS, Azure, Oracle, and GCP at DoD Impact Levels (IL) 2-6. The position directly supports ISSO/ISSM functions, ATO sustainment, continuous monitoring, vulnerability management, and cybersecurity compliance activities in accordance with DoDI 8500.01, DoDI 8510.01 (RMF), AFI 17-101 (RMF), DoD Cloud Computing SRG, and NIST SP 800-53
 <br/>
 <br/>
 This role will work closely with Government ISSOs, ISSMs, Authorizing Officials (AOs), Cybersecurity Service Providers (CSSPs), and Cloud One engineering teams to ensure continued ATO compliance, security posture improvement and monitoring, and rapid remediation of vulnerabilities within the C1 environment.
 <br/>
 <br/>
 <ul>
  <li>
   Maintain audit log configuration, monitoring, and retention compliance
  </li>
  <li>
   Support incident reporting and documentation in accordance with DFARS 252.204-7012 and 252.239-7010
  </li>
  <li>
   Ensure compliance with SCCA and Cloud SRG requirements
  </li>
  <li>
   Support secure configuration of AWS, Azure, Oracle, and GCP cloud environments
  </li>
  <li>
   Support the development, updates, and maintenance of RMF authorization artifacts in accordance with DoDI 8510.01 and NIST SP 800-53
  </li>
  <li>
   Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment, including implementation of automated control validation, continuous monitoring integration, and real-time POA&amp;M management
  </li>
  <li>
   Support ATO maintenance and sustainment activities for C1 and DPaaS environments
  </li>
  <li>
   Support Authority to Use (ATU) conditions and remediation tracking as directed by the AO
  </li>
  <li>
   Assist Government ISSO/ISSM with maintaining compliance with:
  </li>
  <ul>
   <li>
    DoDI 8500.01 (Cybersecurity)
   </li>
   <li>
    DoDI 8510.01 (RMF)
   </li>
   <li>
    AFI 17-101 (RMF)
   </li>
   <li>
    DoD Cloud Computing SRG
   </li>
   <li>
    DISA STIG/SRG
   </li>
   <li>
    CNSSI 1253
   </li>
  </ul>
  <li>
   Support security control assessments, audit readiness, and third-party cybersecurity inspections
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelors and 2+ years or more of experience
  </li>
  <li>
   Sufficient Cloud Experience
  </li>
  <li>
   CSSP experience
  </li>
  <li>
   SIEM experience
  </li>
  <li>
   Incident Response
  </li>
  <li>
   Additional experience may be accepted in lieu of degree.
  </li>
  <li>
   Active Secret clearance required
  </li>
  <li>
   US citizenship required
  </li>
  <li>
   CompTIA Security+ (IAT Level II) or equivalent required
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with USAF Cloud One or Platform 1
  </li>
  <li>
   Experience with Zero Trust Architecture
  </li>
  <li>
   Cloud certifications in AWS, Azure, Google, or Oracle clouds
  </li>
  <li>
   Automation experience
  </li>
  <li>
   Certifications: CISSP (IAT Level III) or equivalent
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Benefits
  <br/>
  <br/>
 </strong>
 <strong>
  SES provides a competitive salary and the following benefits:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Medical
  </li>
  <li>
   Dental
  </li>
  <li>
   Vision
  </li>
  <li>
   AD&amp;D
  </li>
  <li>
   STD
  </li>
  <li>
   LTD
  </li>
  <li>
   Company paid Life Insurance
  </li>
  <li>
   401k with employer contribution
  </li>
  <li>
   Paid Time Off
  </li>
  <li>
   Pet Insurance
  </li>
 </ul>
</div>


Cyber Security Analyst (Jr)

Search 10000+ Cyber security analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 cyber security analyst jobs Near Me

Cyber Security Analyst

CYBER SECURITY ANALYST 1

Cyber Security Analyst

Cyber Security Analyst

Cyber Security Analyst

Cyber Security Analyst

Cyber Security Analyst (Jr)