Senior Cybersecurity Analyst

Senior Cybersecurity Analyst Personnel Qualifications At least five years of experience performing the functions associated with this labor category. Experience administering and maintaining the logic for a variety of intrusion detection, prevention, and analysis platforms designed to identify and counter attempted intrusions as part of a defense-in-depth program that protects both local (on-premises) and cloud computing systems. This includes authoring and implementing custom detection content for signature-based detection systems, security information and event management (SIEM) systems, host-based detection systems, and firewall logic. Experience monitoring real-time network activity flagged by various intrusion detection, prevention, and analysis platforms and analyzing raw data, metadata, and event logs to confirm suspected intrusion attempts into local (on-premises) or cloud computing systems. Experience investigating network anomalies and responding to cybersecurity incidents in local (on-premises) or cloud environments, including all phases of digital forensics and incident response (preparation, scoping, containment, eradication, remediation, recovery, lessons learned, and closeout). Experience implementing and maintaining a fully operational data loss prevention system to prevent data loss from local (on-premises) and/or cloud systems. Capabilities Administer and maintain logic for intrusion detection, prevention, and analysis platforms. Author and implement custom detection content for signature-based detection systems, SIEM systems, host-based detection, and firewall logic. Monitor real-time network activity flagged by intrusion detection/prevention platforms and analyze raw data, metadata, and event logs to confirm suspected intrusions. Investigate network anomalies and respond to cybersecurity incidents in local or cloud environments. Implement and maintain data loss prevention capabilities to safeguard data across systems. Certifications Certified Information Systems Security Professional (CISSP) Certified Incident Handler (GCIH) GIAC Network Forensic Analyst (GNFA) GIAC Certified Forensic Analyst (GCFA) Equivalent certifications are also acceptable.

#J-18808-Ljbffr