Information Security Analyst

Information Security Analyst

The Information Security Analyst, a member of the Cybersecurity Operations Group, will report to the Director of Information Security & Assurance. This role involves overseeing ongoing monitoring of the network environment to identify and respond to malicious activities and potential threats.

The candidate must be local to the D.C. Metro area and will have to come on site their Washington D.C. office several times a year.

What You Will Be Doing:

• Utilize cyber defense tools to consistently monitor systems and detect malicious activity.
• Analyze identified malicious activity, assessing vulnerabilities, exploitation methods, and potential impacts on systems and information if compromised.
• Investigate suspicious emails to identify potential threats with malicious intent.
• Monitor various cyber threat consoles, receive alerts, and notifications upon detection of malicious or suspicious activity.
• Employ malware sandboxes to detonate suspicious files and URLs, analyzing results for actionable tasks.
• Monitor email content filtering appliances, analyzing quarantined messages and files for potential threats.
• Analyze audit logs for policy exceptions and data loss prevention events.
• Monitor firewall intrusion detection and prevention solutions to identify potential threats.
• Perform event correlation by gathering information from various network sources to enhance situational awareness and assess the effectiveness of observed threats or attacks.
• Conduct trend analysis in cyber defense and generate reports on findings.

Required Skills & Experience:

• A minimum of 3 years' experience in a professional role within Information Security and/or Cybersecurity.
• Familiarity with cyber defense practices and techniques used in cyber-attacks across various computing platforms.
• Proficiency in information security policy, standards, and industry-recognized best practices.
• Strong written and verbal communication skills.

Desired Skills & Experience:

• Bachelor’s degree in computer science, information systems, cybersecurity, or related field preferred, not required.
• CISSP, CISA, CISM, CEH are preferred certifications.

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn’t provide sponsorship.