security assurance analyst

The Emirates Group

<div><h5 class="jobSectionHeader"><b>Job Purpose
</b></h5><p>At Emirates we believe in connecting the world to and through our global hub in Dubai and in constantly innovating to ensure our customers 'Fly Better'. Emirates Group IT thrives on the dynamic nature of technology Being pioneers in aviation innovation were always at the forefront pushing boundaries Were on the lookout for exceptional IT professionals to fortify our position as leaders in the industry Embark on a journey with the worlds largest international airline and become a vital part of our cutting edge information and technology team as Senior CyberSecurity Assurance Services Analyst - Architectural Governance.
</p><p>At Emirates we believe in connecting the world to and through our global hub in Dubai and in constantly innovating to ensure our customers 'Fly Better'. Emirates Group IT thrives on the dynamic nature of technology Being pioneers in aviation innovation were always at the forefront pushing boundaries Were on the lookout for exceptional IT professionals to fortify our position as leaders in the industry Embark on a journey with the worlds largest international airline and become a vital part of our cutting edge information and technology team as Senior CyberSecurity Portfolio Assurance Analyst - Architectural Governance .
</p><p>Provide subject matter expertise across secure software development, security architecture governance, and cybersecurity metrics and data analytics for the Emirates Group. Drive the integration of secure coding practices, the validation and evolution of security architecture patterns, and the delivery of actionable security metrics to proactively strengthen the Group's security posture. Collaborate with cross-functional and portfolio assurance teams to ensure policy and standards compliance, foster innovation, and enable informed, data-driven decision-making to mitigate risk and enhance organisational resilience.
<br>
<br>
<b>In this role, you will:
</b></p><ul><li>Lead the planning, execution, and continuous improvement of cybersecurity assurance services initiatives by setting clear objectives, aligning activities with organisational goals, and ensuring best practices are embedded across secure coding, architecture governance, and metrics-driven risk management.
</li><li>Oversee and facilitate cross-functional collaboration by engaging with IT, development, portfolio assurance, and governance teams. Assist in embedding robust security controls, policies, and standards into all phases of the technology lifecycle, ensuring seamless integration and consistent service across the enterprise.
</li><li>Champion the adoption and optimisation of advanced security tools, automation, and analytics by evaluating emerging technologies, streamlining workflows, and implementing scalable solutions. Enhance the efficiency, accuracy, and effectiveness of assurance processes.
</li><li>Mentor and coach technical teams by providing expert guidance, delivering targeted training, and fostering a culture of excellence, accountability, and continuous learning across coding, architecture, and metrics domains.
</li><li>Drive risk identification, escalation, and mitigation efforts by leveraging threat intelligence, governance frameworks, and data-driven insights. Proactively inform strategic decisions, prioritise remediation activities, and ensure organisational resilience against evolving cyber threats.
</li><li>Govern the review, approval, and validation of security architecture designs for new and existing solutions. Ensure strict adherence to the Emirates Group&rsquo;s approved security patterns, frameworks, and risk appetite. Proactively identify and address architecture-related security risks.
</li><li>Lead the evaluation, evolution, and creation of security architectural patterns by collaborating with solution specialists, architects, and technical teams. Recommend and coordinate updates to address emerging threats, business needs, and technological advancements.
</li><li>Provide expert guidance and actionable feedback to stakeholders on the implementation of secure architectures. Facilitate compliance with internal policies, regulatory standards, and secure-by-design principles. Support audit and compliance activities as needed.
</li></ul><h5 class="jobSectionHeader"><b>Qualification
</b></h5><p><b>To be considered for this role, you must meet the below requirements:
</b></p><ul><li>Degree or Honours (12+3 or equivalent) in Cybersecurity, Computer Science, Data Analytics, Engineering, or a related IT discipline.
</li><li>5+ years in Information Technology and IT security, including hands-on Cybersecurity Data Analytics experience.
</li><li>Relevant credentials such as CISSP, CISM, OSCP, CISSP-ISSAP, SABSA, TOGAF, ISO 27001 Lead Auditor, or Data Analytics certifications.
</li><li>Deep expertise in secure software development, secure coding practices, and frameworks such as OWASP Top 10, NIST, and ISO/IEC 27001.
</li><li>Advanced proficiency in integrating and optimising automated code analysis tools within CI/CD pipelines, with experience mentoring developers in secure coding.
</li><li>Proven ability to govern and validate enterprise-scale security architectures across cloud, hybrid, and legacy environments using SABSA and TOGAF frameworks.
</li><li>Strong analytical skills for identifying architectural risks, control gaps, and recommending mitigations while balancing technical feasibility with security needs.
</li><li>Advanced proficiency in data analytics, visualisation tools (Power BI, Tableau, Python), and automating data workflows to support security metrics and reporting.
</li><li>Strong understanding of cybersecurity KPIs, data governance, and best practices for maintaining data integrity and confidentiality.
</li><li>Excellent stakeholder engagement skills for technical and executive audiences, with a proactive approach to risk, problem-solving, and continuous learning.
</li></ul><p><b>Leadership Role: </b>Yes
</p><h5 class="jobSectionHeader"><b>Salary &amp; benefits
</b></h5><p>Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. Find out what it&rsquo;s like to live and work in our fast-paced, cosmopolitan home city in the Dubai Lifestyle section of our website www.emirates.com/careers</p></div>

Senior Cybersecurity Assurance Services Analyst

ATSG

<div><p><b>Information Security Analyst</b></p>
<p><b>
What you will do:
</b></p><p>The Information Security Analyst will assist in the development of a NIST 800-171 / CMMC Cybersecurity policy, system security plans, perform GAP Analysis and recommend security enhancements to management and I.T. staff. This person will coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments, and in many cases remediate vulnerabilities within the network. Will serve as liaison to 3rd party security managed services and be an internal subject matter expert and/or project lead for all current and future cyber security initiatives. In cooperation with System Administrators, this position will play a hands-on role in working with technology to secure computer and network systems, including but not limited to installing SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations, and analyzing the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures. This position reports to the Manager of Systems Administration.</p>
<p><b>
What you need:</b></p>
<ul>
<li>Bachelor&rsquo;s degree in computer science, technology, or equivalent experience</li>
<li>Knowledge or networks; TCP/IP, DNS, Firewalls, Windows and Linux Servers, VMWare, Nutanix, Active Directory, MFA and Encryption</li>
<li>Excellent planning and organizational skills</li>
<li>Strong written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
</ul>
<p><b>Preferred Skills</b></p>
<ul>
<li>Certification such as Security +, CISSP, CEH are a plus</li>
<li>Experience with NIST, CMMC and Sox requirements are a plus</li>
<li>Experience with anti-virus, threat analysis and security testing tools are a plus</li>
<li>Ability to contribute to DR planning a plus</li></ul></div>

ATSG IS SECURITY ANALYST

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><div>
We are open to hiring candidates to work out of one of the following locations:<br>
<br>
Redmond, WA, USA | Arlington, VA, USA<br>
<br>
Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide.
<br>
<br>
At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators.<br>
<br>
Export Control Requirement:<br>
<br>
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.<br>
<br>
Key job responsibilities<br>
<ul><li>Design and drive scalable processes within a GRC (Governance, Risk, and Compliance) framework to ensure compliance with Leo's regulatory and contractual security and privacy requirements;</li><li>Building and maintaining compliance certifications such as ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA etc., identifying applicable security controls, assessing compliance gaps and readiness, developing remediation strategies, and driving remediation activities to completion;</li><li>Driving certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and establishing considerations for applying security, and risk concepts to a highly technical and complex environment;</li><li>Communicating to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks and areas of program improvement, as well as, seek diverse opinions and coordinate improvement efforts;</li><li>Working closely with engineering, compliance, security, bizdev and Legal teams to identify future compliance and regulatory requirements and define compliance solutions;</li><li>Serving as an advisor on assurance issues;</li><li>Understand and manage cross-functional GRC requirements to translate them into GRC tool; and</li></ul>
- Be comfortable with hands-on day-to-day problem solving and implementing quick and effective action plans to meet short- and long-term priorities.<br>
<br>
A day in the life<br>
Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators.<br>
<br>
You will work in a start-up like environment, backed by Amazon&rsquo;s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization.<br>
<br>
About the team<br>
Diverse Experiences<br>
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Why Amazon Security?<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores<br>
<br>
Inclusive Team Culture<br>
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
<br>
Training &amp; Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader"><b><br>
BASIC QUALIFICATIONS</b></h2><ul><li>Bachelor's degree or above</li><li>3+ years of professional experience in governance, risk and compliance designing and implementing controls or experience performing audits over ISO 27001, NIST 800-53, SOC 1/ SOC 2 and other similar globally recognized compliance programs</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>CISSP, CISA, CISM or other security certification</li><li>Experience building strategic relationships with stakeholders, including communicating and collaborating across teams and functions</li><li>Experience working with ITAR and EAR controlled data</li><li>Demonstrate comprehensive understanding of compliance requirements for ISO 27001, ISO 22301, SOC 2, and US Government Compliance Frameworks/Programs (FedRAMP, NIST 800-53, NIST 800-171, NIST Risk Management Framework, FISMA).</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually<br>
USA, WA, Redmond - 102,000.00 - 178,400.00 USD annually</div><p></p>

Security Compliance Specialist, Amazon Leo Security Assurance

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Security Control Assessor &ndash; Job Description</b></h1><b>
Position Title: </b>Security Control Assessor<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Overview</b></h2>
The Security Control Assessor (SCA) shall provide cybersecurity assessment, authorization, and compliance support services for the U.S. Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program.<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2><ul><li>
Conduct independent security control assessments in accordance with NIST SP 800-53 Rev. 5 and NIST SP 800-53A methodologies.</li><li>
Evaluate management, operational, and technical security controls for federal information systems and cloud environments.</li><li>
Support the SBA Risk Management Framework (RMF) lifecycle including assessment, authorization, continuous monitoring, and ongoing authorization activities.</li><li>
Develop and maintain Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, risk findings, and remediation recommendations.</li><li>
Review and validate cybersecurity documentation including System Security Plans (SSPs), Configuration Management Plans (CMPs), Incident Response Plans, ISCPs, and architecture diagrams.</li><li>
Perform vulnerability assessment validation activities and verify remediation efforts for identified weaknesses and deficiencies.</li><li>
Support Information System Continuous Monitoring (ISCM) activities and ongoing authorization (OA) evaluation support.</li><li>
Assess compliance with FISMA, OMB Circular A-130, NIST guidance, FedRAMP requirements, and agency-specific cybersecurity policies.</li><li>
Support audit readiness activities for Inspector General (IG), GAO, FISMA, and internal cybersecurity audits.</li><li>
Assist with High Value Asset (HVA) assessment support activities in alignment with CISA and OMB guidance.</li><li>
Coordinate with ISSOs, ISSMs, system owners, and engineering teams to evaluate cybersecurity risks and remediation strategies.</li><li>
Support enterprise vulnerability management and risk reporting activities.</li><li>
Participate in cybersecurity governance meetings, compliance reviews, and technical assessment briefings.</li><li>
Document assessment findings, technical analysis, and recommendations with clear and concise reporting suitable for executive and technical stakeholders.</li><li>
Support development of cybersecurity metrics, dashboards, and compliance reporting artifacts.</li><li>
Ensure all assessment deliverables are peer reviewed, Section 508 compliant, and delivered in accordance with SBA-defined quality standards and timelines.</li></ul><h2 class="jobSectionHeader"><b>
Required Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or related field.</li><li>
Minimum of six (6) years of experience supporting federal cybersecurity assessment, compliance, RMF, or security authorization activities.</li><li>
Minimum of four (4) years of experience conducting security control assessments, vulnerability assessments, or cybersecurity compliance evaluations.</li><li>
Demonstrated expertise in NIST RMF processes, NIST SP 800-53 Rev. 5, NIST SP 800-53A, and FISMA compliance requirements.</li><li>
Experience developing Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, and related accreditation documentation.</li><li>
Experience supporting continuous monitoring, ongoing authorization (OA), and cybersecurity audit activities.</li><li>
Knowledge of FedRAMP security assessment and continuous monitoring requirements.</li><li>
Experience using cybersecurity assessment, vulnerability management, and governance/risk/compliance (GRC) tools.</li><li>
Strong analytical, technical writing, and communication skills.</li><li>
Relevant cybersecurity certifications such as CAP, CISSP, CISA, Security+, CEH, or equivalent preferred.</li><li>
Ability to obtain and maintain a Moderate Risk background investigation and eligibility for higher-level clearances if required.</li></ul><h2 class="jobSectionHeader"><b>
Desired Experience</b></h2><ul><li>
Experience supporting civilian federal agencies such as SBA, DHS, or CISA.</li><li>
Experience supporting FedRAMP cloud environments including Microsoft Azure, AWS, Microsoft 365, and SaaS platforms.</li><li>
Experience supporting enterprise cybersecurity metrics, dashboards, and automated compliance reporting.</li></ul><p>
</p><p>PZHe7BkzAJ</p></div>

SBA - Security Control Assessor

<div><h1 class="jobSectionHeader"><b>Vulnerability Analyst II &ndash; Job Description</b></h1><b>
Position Title: </b>Vulnerability Analyst II<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul><p>
</p><p>Gupkg0JOaj</p></div>

SBA - Vulnerability Analyst II

Accenture Middle East

<div>
 Responsibilities:
 <br/>
 <br/>
 Operate and support Network Security services on a day-to-day basis, including Network Detection and Response using Darktrace, DDoS protection using Arbor, firewall policy analysis and change validation using AlgoSec, malware analysis and threat detection using FortiSandbox, and Web Application Firewall operations using F5 WAF. Perform monitoring, alert analysis, and investigation of network and application-layer security events, supporting incident detection, containment, and resolution. Administer and operate network security devices and platforms, ensuring secure configuration, availability, and performance across on-premises and cloud environments. Support patching, upgrades, and signature updates for network security solutions in accordance with approved processes. Identify operational gaps and improvement opportunities and contribute to continuous improvement initiatives. Support troubleshooting of network and security issues, including traffic analysis and packet capture when required. Maintain operational documentation, support audits and reporting activities, and escalate complex issues as needed.
 <br/>
 <br/>
 Qualifications:
 <br/>
 <br/>
 1-3 years of experience in network security or information security roles.
 <br/>
 <br/>
 Hands-on experience operating Network Detection and Response
 <br/>
 <br/>
 F5 Experience
 <br/>
 <br/>
 DDoS protection, firewall environments, sandbox solutions, and Web Application Firewalls. Strong understanding of network security concepts, traffic analysis, and incident response. Relevant security certifications are considered an advantage.
 <br/>
 <br/>
</div>


Infrastructure Security Analyst - Saudi Nationals

<div><h1 class="jobSectionHeader"><b>Cyber Threat Intelligence Analyst Job Description</b></h1><b>
Position: </b>Cyber Threat Intelligence Analyst<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services.<br>
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul><p>
</p><p>Pw75tUj9Bf</p></div>

SBA - Cyber Threat Intelligence Analyst

Search 10000+ Security assurance analyst jobs near you this May. New roles added regularly across leading industries. Apply today.