Associate IT Cybersecurity Analyst

Job Summary

The Associate IT Cybersecurity Analyst / IT Cybersecurity Analyst is an entry to mid-level position with the purpose of learning how to apply professional concepts to the day to day technical cybersecurity business.  Works on issues of a limited scope where answers are more readily available.  Follows company policies and practices to develop solutions. Normally receives detailed instructions on all work and works under direct supervision.  Builds relationships internally. 

Works as a member of a team to support the company’s overall cybersecurity infrastructure and operational effectiveness through cybersecurity preparedness, threat prediction and detection, incident response and recovery, and is involved in both design & engineering and operational activities. Specific functional areas include, but are not limited to, identity and access management, cybersecurity engineering and operations, threat intelligence, vulnerability management, situational awareness, cybersecurity analytics, cybersecurity incident management, and active defense. Operational duties include first level operational and incident response activities, implementing, configuring, testing, debugging and maintaining the systems in these functional areas, in addition to consulting, problem resolution, performance tuning and monitoring.

This position is part of a job family (Associate IT Cybersecurity Analyst, IT Cybersecurity Analyst) where experience will be the determining factor. 

Job Responsibilities

• Protect enterprise information, intellectual assets and business operations from accidental or intentional disruption, disclosure or destruction
• Provides the support, administration, and maintenance necessary to ensure effective and efficient information technology (IT) system performance and security
• Performs specific and limited portions of a broader assignment of an experienced IT Cybersecurity Analyst or other senior staff
• Implements various device and system configurations utilizing prescribed methods
• Performs routine systems work related to the computer network defense infrastructure hardware and software requiring application of standard techniques and procedures
• Implements and maintains solutions to cybersecurity systems and tools for continuous operations of these systems
• Adhere to policies and procedures necessary to ensure compliance with applicable standards and regulations
• Cybersecurity event monitoring and reporting
• Implement relevant security incident alerts and alarms under the direction of senior staff
• Perform periodic vulnerability scans on server, network device and application targets that include enterprise and Operating Technology hosts; support and provide vulnerability scan and reporting data to senior staff
• Works under direction of Supervisor or Sr IT Cybersecurity Analyst who screens assignments for unusual or difficult problems.  Receives close supervision on new aspects of assignments
• Develops knowledge of systems, equipment, and supporting applications, and how they support the business
• Maintains performance and process metrics to evaluate the efficiency and effectiveness of processes, procedures, and systems, generally under the direction of senior staff
• Effectively uses various forms of communication to successfully perform duties
• Builds relationships internally
• Work assignments may include 24x7 coverage
• May require travel to other locations

Minimum Qualifications

• Bachelor’s degree in computer science, computer engineering, software engineering, information technology, computer information systems, MIS, or engineering is preferred. A combination of associate degree, military or professional cybersecurity experience and cybersecurity certification (CISSP, GAIC, MCSE, CEH, GICSP, CSSA, CISM) will be considered
• IT Cybersecurity Analyst requires 2+ years of Cybersecurity experience

Preferred Qualifications

• Directory Services
• Identity and Access Management, cloud based services
• Scripting experience, PowerShell or .NET (VB or C#)
• Data security
• Application security
• Network security
• Endpoint protection technology, including encryption
• Vulnerability Management
• Network Access Management
• Operating System Administration
• Firewall technology
• Secure web gateway technology
• Mobility security