Sr. Cyber Security Analyst

3 weeks ago


Ventura County, United States Take2 Consulting, LLC Full time

Clearance: Minimum of a DoD Secret Clearance




Position Description

The Senior SOC Analyst team member is responsible for the analysis of all technology devices which may include Operational Technology (OT) and Industrial Control Systems (ICS) as well as on-premises and cloud enterprise networks. This includes analysis of device communication, forensic analysis of Windows or Linux systems and servers, timeline analysis of activity on these endpoints, user permission and authentication audits, log analysis, and malware identification/triage.

An ideal candidate for this position will be a proactive self-starter who has experience with system administration, Windows and Linux operating systems (OS) mechanics including filesystem structures, disk and memory forensics, cyber aware Operational Technology or Control Systems operators, commonly used mechanisms for maintaining security persistence, privilege escalation, and lateral data movement, operating system log analysis, and triaging suspicious file artifacts for unusual behavior. This role requires a familiarity with what routine OS activities and common software/user behavior looks like in the context of forensic artifacts or timelines. Analysts should also be familiar with common categories and formats of host-based indicators of compromise (IOCs) and how/where they can be leveraged to identify known-bad files/activity on an endpoint. Candidate will utilize the Cyber Kill Chain and synthesize the entire attack life cycle along with creating detailed reports on how impacts may or have occurred.

As a senior role candidate will review and provide feedback to journeyman and junior analysts’ investigation and facilitate discussions on recommendations on improving SOC visibility, efficiency, and/or processes


Responsibilities

  • Support client leaders in establishing and managing a Security Operations Center (SOC) to provide a secure environment that facilitates monitoring, incident response, malware analysis, and threat hunting activities.
  • Provide oversight over more junior cyber analysts and assist client with prioritization and milestone tracking for efforts related to the SOC
  • Manage the security information and event management (SIEM) platform to monitor for security alerts and coordinate vulnerability assessments and artifact collection across servers and network devices
  • Asses Security Technical Implementation Guides (STIGs) compliance and completion
  • Utilize asset mapping tools to verify connected inventory
  • Handle Information Assurance Vulnerability Management (IVAM) notifications
  • Evaluate network structures and device configurations for security risks, offering recommendations based on best practices, and gather data to identify and respond to network intrusions
  • Analyze network traffic and system logs to identify malicious activities, vulnerabilities exploited, and methods used, and develop processes to enhance SOC response and efficiency
  • Conduct comprehensive technical analyses of computer evidence, research and integrate new security tools into the SOC, and synthesize findings into reports for both technical and non-technical audiences


Qualifications

  • (Senior level) At least 5 years of experience in security operations, demonstrating leadership in customer-facing roles
  • Proficient in analyzing cyber-attacks, with a deep understanding of attack classifications, stages, system/application vulnerabilities, and compliance with Department of Defense (DoD) policies and procedures
  • Extensive knowledge of network topologies, protocols (e.g., TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB), and experience with tools like Palo Alto, Elastic SIEM, Cribl, Splunk, VMware, Security Center
  • Capable of attack reconstruction based on network traffic, integrating Threat Intelligence, and familiar with MITRE ATT&CK framework, with the ability to collaborate effectively across multiple locations


Desired Skill sets

  • Knowledge of Operational Technology (OT) or Industrial Control Systems (ICS)
  • Strong analytical and troubleshooting skills
  • Able to provide expert content development in Splunk Enterprise Security using tstats and data models
  • Understands how to utilize knowledge of latest threats and attack vectors to develop correlation rules for continuous monitoring on various security appliances
  • Experience in other tools and protocols as applicable such as Nessus, Endgame, CrowdStrike, Gray Noise, Shodan, Bacnet, MODBus, SCADA systems, and PCAP
  • Review logs to determine if relevant data is present to accelerate against data models to work with existing use cases
  • Familiar with the operations and functions of Nessus or security center management
  • Can assist and provide technical input to research, discover, implement hardware and software
  • Understands importance and fundamentals of logistics and evidence handling
  • Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or relevant IT technology certification


Examples of other certifications include:

  • Offensive Security Certified Professional (OSCP)
  • GIAC Response and Industrial Defense (GRID)
  • CERT Certified Computer Security Incident Handler
  • ECC CEH (Electronic Commerce Council Certified Ethical Hacker)
  • GCIH (GIAC Certified Incident Handler)
  • GISF (GIAC Information Security Fundamentals)
  • CISSP (Certified Information System Security Professional)
  • Additional certifications at an equivalent may also be considered.



Take2 is an Equal Opportunity Employer



  • ventura county, United States Take2 Consulting, LLC Full time

    Clearance: Minimum of a DoD Secret ClearancePosition DescriptionThe Senior SOC Analyst team member is responsible for the analysis of all technology devices which may include Operational Technology (OT) and Industrial Control Systems (ICS) as well as on-premises and cloud enterprise networks. This includes analysis of device communication, forensic analysis...


  • ventura county, United States Take2 Consulting, LLC Full time

    Clearance: Minimum of a DoD Secret ClearancePosition DescriptionThe Senior SOC Analyst team member is responsible for the analysis of all technology devices which may include Operational Technology (OT) and Industrial Control Systems (ICS) as well as on-premises and cloud enterprise networks. This includes analysis of device communication, forensic analysis...


  • Monmouth County, United States Walsh Employment Full time

    Voted by employees as a Top Place to Work, our client’s patented software platform provides early detection, diagnosis and recovery of cyber and ransomware attacks allowing businesses to accelerate response, minimize disruption, prevent data loss, and reduce risk. The business is leading the way in developing cutting edge, high-performance AI-powered data...


  • Monmouth County, United States Walsh Employment Full time

    Voted by employees as a Top Place to Work, our client’s patented software platform provides early detection, diagnosis and recovery of cyber and ransomware attacks allowing businesses to accelerate response, minimize disruption, prevent data loss, and reduce risk. The business is leading the way in developing cutting edge, high-performance AI-powered data...


  • Lee County, United States Bluebird Staffing Full time

    Bluebird has a direct hire position for Medical Security Analyst (GRC) a position in Florida** Hybrid (2 days a week in the office must live or relocating to Lee County, Florida****Paid relocation assistance available**Medical Security Analyst (GRC) Job Description for the Medical Security Analyst (GRC):Seeking an Advanced Security Analyst who will be...


  • Lee County, United States Bluebird Staffing Full time

    Bluebird has a direct hire position for Medical Security Analyst (GRC) a position in Florida** Hybrid (2 days a week in the office must live or relocating to Lee County, Florida****Paid relocation assistance available**Medical Security Analyst (GRC) Job Description for the Medical Security Analyst (GRC):Seeking an Advanced Security Analyst who will be...


  • Ventura County, United States LHH Full time

    LHH is partnering with a long-time client to find an experienced Cybersecurity Specialist to join their team in Ventura County! This candidate MUST possess a Top-Secret Clearance!Key Responsibilities:Plan, implement, upgrade, or monitor security measures to protect computer networks and information.Assess system vulnerabilities for security risks and propose...


  • Ventura County, United States LHH Full time

    LHH is partnering with a long-time client to find an experienced Cybersecurity Specialist to join their team in Ventura County! This candidate MUST possess a Top-Secret Clearance!Key Responsibilities:Plan, implement, upgrade, or monitor security measures to protect computer networks and information.Assess system vulnerabilities for security risks and propose...


  • Ventura County, United States Booz Allen Hamilton Full time

    Information Systems Security Officer, SeniorThe Opportunity:Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them to seem overwhelming to the defense industry. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you...


  • Ventura County, United States Booz Allen Hamilton Full time

    Information Systems Security Officer, SeniorThe Opportunity:Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them to seem overwhelming to the defense industry. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you...

  • SECURITY ANALYST

    2 hours ago


    Lee County, United States Bluebird Staffing Full time

    SECURITY ANALYST (GRC)*Government, Risk, Compliance in CybersecurityRELOCATION PAID: YesLOCATION / RESIDENCE: HYBRID (2 days a week in office)Applicants MUST reside in or relocate to within 1 hour of Fort Myers, Florida. Paid relocation is available.JOB DESCRIPTIONSeeking an Advanced Security Analyst who will be responsible for maintaining Governance, Risk,...


  • lee county, United States Bluebird Staffing Full time

    Bluebird has a direct hire position for Medical Security Analyst (GRC) a position in Florida** Hybrid (2 days a week in the office must live or relocating to Lee County, Florida****Paid relocation assistance available**Medical Security Analyst (GRC) Job Description for the Medical Security Analyst (GRC):Seeking an Advanced Security Analyst who will be...


  • Ventura County, United States General Dynamics Information Technology Full time

    Type of Requisition:PipelineClearance Level Must Currently Possess:SecretClearance Level Must Be Able to Obtain:SecretPublic Trust/Other Required:NoneJob Family:IntelligenceJob Qualifications:Skills:Electronic Intelligence, Electronic Intelligence (ELINT), Electronic Warfare, Mission Analysis, ResearchingCertifications:NoneExperience:5 + years of related...


  • Dale County, AL, United States Experis Full time

    Our client?is seeking a Cyber Security Research Consultant?to join their team. This is a W2 C2H and will be a hybrid schedule, where you would need to be able to report onsite 3x per week. There is 1 opening in Washington DC and 1 opening in New York City. Given the nature of the work, candidates must currently possess an ACTIVE top-secret clearance. ? Job...


  • Ventura County, United States General Dynamics Information Technology Full time

    Type of Requisition:PipelineClearance Level Must Currently Possess:SecretClearance Level Must Be Able to Obtain:SecretPublic Trust/Other Required:NoneJob Family:IntelligenceJob Qualifications:Skills:Electronic Intelligence, Electronic Warfare, RF Design, RF TestingCertifications:NoneExperience:5 + years of related experienceUS Citizenship Required:YesJob...


  • Morris County, United States C. Winchell Agency, Inc. Full time

    Cyber Liability UnderwriterProperty & Casualty Insurance IndustryMorris County, NJAnalyze and review the cyber security & privacy controls posture of new business clients in order to determine their eligibility for the book of business. Determines proper insurance program including layer attachment, terms, conditions, pricing and alternatively decline or...


  • Hillsdale County, United States The Beneva Group Full time

    Beneva Group has recently been engaged by a distinguished Christian liberal arts college to help them find a Sr. Continuous Improvement Analyst to join their developing CI team. This Sr. CI Analyst will drive process excellence across business units, designing innovative solutions to achieve best-in-class performance. You will work autonomously, lead...


  • Pierce County, United States Amentum Full time

    Your Impact:We are seeking experienced intelligence analysts to conduct research and analysis and produce finished intelligence products and responses to RFIs on foreign intelligence and technology protection-related threats to the US Army and the DoD worldwide. This role conducts analysis using intelligence and information from multiple sources to assess,...

  • Epic Security Analyst

    2 weeks ago


    San Mateo County, United States Zeektek Full time

    Security Analyst Needs:1. Expert in SER and EMP database architecture, management, record building and troubleshooting2. Expert in Active Directory and Security Groups3. Expert in standard security practices4. Ability to facilitate multi-disciplinary group discussions regarding security and best practice5. Ability to mentor and share knowledge with SMMC/SMHD...

  • Business Analyst

    10 hours ago


    Bergen County, United States Robert Half Full time

    Sr. Financial Analyst / Pharma / Power BI Fast growing start up international pharma company with US Operations located in Bergen County is looking for a strong Sr. Financial Analyst to be responsible for market research and analysis to generate insights and recommendations for commercial strategy. The position will manage operational processes to onboard...