Cyber Security Analyst

---

Job description

LEAD CYBERSECURITY SOC SPECIALIST - 2nd and 3rd SHIFTS AVAILABLE

INCIDENT RESPONSE

ALTA IT Services, a wholly owned subsidiary of System One, has a contract opening for multiple Lead Cybersecurity Specialists to support a leading, Washington DC- based health insurance customer. Expected duration - 9 months +. This is a Security Operations environment, 2nd and 3rd SHIFTS AVAILABLE

• The Lead Cybersecurity Analyst / Incident Responder will perform in-depth analysis on security events, intrusion detection, malware analysis, threat hunting and all phases of security event monitoring and incident response. The role requires complete monitoring, triage and incident response functions in a combined SOC/CIRT environment.
• Will use advanced SOC / CIRT security platforms and processes daily. Training will be given on specific platforms; however, candidate should be an expert in SOC / CIRT processes and general platforms already.
• Role will entail working closely with team members to run an investigation from start to finish, ensuring collaboration with any appropriate teams and stakeholders at all levels.
• There will be occasional presentations, audit support and regular documentation of investigations and project deliverables so strong verbal and written communications skills are critical.

These are currently a REMOTE positions for a corporate SOC but will return to Washington D.C. in a part-time on-site capacity once COVID-19 restrictions are eased. We specifically need someone to take a lead role within a small Cybersecurity team, after coming up to speed. May include weekend work on a Saturday or Sunday for emergent incident responses only.

REQUIREMENTS

• 7-10 Years' Experience in Cyber Operations, Engineering, and Incident Response
• At least 6 years of experience as a security operations center (SOC) analyst
• Successful candidate must be a motivated self-starter with a highly inquisitive and analytic mindset.
• Relevant cybersecurity subject matter expertise - especially in information security, network security, security event triage, intrusion analysis, malware, computer networking TCP/IP, and anomalous behavior.
• Experience and skills in: continuous monitoring, information security alerting, security event triage, intrusion analysis, threat trends, malware, and anomalous behavior.
• Demonstrated experience with security information and event management (SIEM - Qradar is a Plus), security orchestration and automated response (SOAR - Demistory/PaloAlto XOAR is a plus), and other security technologies.
• Experience in, or willingness to quickly learn, at least one security tool type such as IDS (Palo Alto Threat Protection/Wildfire is a plus/IPS (Cisco Source Fire is a plus), network access control (ForeScout[MM1] is a plus), firewall (Palo Alto PAN is a plus), anti-malware (CarbonBlack EDR and CrowdStrike Falcon is a plus), etc
• Experience with the Microsoft Cloud Security Apps, Office 365 EPO (Sentinel is a Plus).
• Attention to detail and excellent analytical and problem-solving skills.
• Advanced written and verbal communication skills.
• Excellent organizational skills and ability to set priorities and handle multiple projects concurrently.
• Excellent analytical and problem-solving skills
• Teamwork and collaboration skills are critical. This is not a position for someone who prefers to work alone.
• This position requires a bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business or relevant work experience in application security analysis, systems analysis and/or testing background and experience with direct Business Analyst experience.
• Excellent interpersonal skills including the ability to build consensus and agreement and bring resolution to contentious issues and entrenched interests.
• Must demonstrate understanding of industry standard security best practices
• Excellent knowledge of MS Office tool set - MS Word, MS Excel, MS Project and MS Visio.
• Excellent knowledge of MS PowerBI, PowerShell, and other Office365 Applications.

PREFERRED

• Security Certifications.
• Passion for Cybersecurity.
• Hands on experience with some or all: NetFlow and full packet capture technology, Intrusion Detection Systems (IDS), firewalls, AV, and other similar network security tools
• Experience with healthcare insurance industry, especially BCBS plans.
• Effective presentation, negotiation and influencing skills to interface with all levels of management and to facilitate large meetings across the organization. Advanced written and verbal communication skills are critical.

HOURLY RATE: Up to $95/hr. range for a very strong candidate. Benefits available. C2C is OK

For consideration, please send updated resume to Melissa McNally via

ALTA IT Services, a wholly owned subsidiary of System One, is an established leader in IT Staffing and Services, specializing in Agile Transformation Services, Program & Project Management, Application Development, Cybersecurity, and Data & Advanced Analytics. We are an equal opportunity/affirmative action employer and considers qualified applicants for employment without regard to race, gender, age, color, religion, disability, veteran status, sexual orientation, or any other factor.

[MM1]