Cybersecurity Operations Analyst II

2 weeks ago


St Louis, United States Strategic ASI Full time

Our client is seeking multiple Cybersecurity Operations Analyst II who could potentially be located in either Springfield, VA or Saint Louis, MO.

What You'll Get to Do:

  • Coordinate and implement tasks, performing analysis, and building/documenting response activities required during cyber security incident response, including but not limited to actions such as implementing containment measures, IP blocks, domain blocks, and disabling user accounts on the direction of the Government.
  • Coordinates with Security and Installations Directorate (SI) Office of Counterintelligence (SIC), Insider Threat Office (SIII), in addition to other law enforcement and counterintelligence personnel as required to perform advanced investigation and triage of incidents;
  • Collaborates with appropriate authorities in the production of security incident reports;
  • Categorizes incidents and events;
  • Coordinates with other contracts, organizations, activities, and other services as appropriate to ensure incidents are properly reported, contained, and eradicated;
  • Coordinates with other contracts, organizations, activities, and other services as appropriate to de-conflict blue/red team activity with open incidents/events;
  • Coordinates with other contracts, organizations, activities, and services to ensure NGA recovers from an incident/event;
  • Builds timelines, documents, briefings, and other products as required to inform stakeholders of incident response actions, analysis, and the impact of both adversary activity and blue force response actions.
  • Documents actions taken and analysis in the authorized ticketing system to a level of detail where the actions taken and analysis are capable of being systematically reconstructed.
  • Develops and when approved by the Government generates and updates reports in the Joint Incident Management System (JIMS), Incident Case Management System (ICMS), and/or other authorized reporting systems as directed;
  • Develops, maintains, sustains, and when properly authorized by the Government executes custom scripts, tools, and capabilities to collect and analyze data, and to respond to incidents/events;
  • Performs digital media analysis on host, server, and network data as required to analyze and respond to an incident, including but not limited to volatile and non-volatile memory and/or system artifact collection and analysis;
  • Develops and identifies indicators of compromise to send to Cybersecurity stakeholders and other Contract Services;
  • Provides adversary attribution;

More About the Role:
  • Performs malware analysis and signature development;
  • Provides input to and coordinates with all applicable stakeholders to develop and deliver the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status Report;
  • Serve as C-IRT members as required and serve under the direct control of, and take direction from, the Government C-IRT Commander;
  • Develop and coordinate courses of action with various Government and contract stakeholders, and when properly authorized by the Government, execute Defensive Cyberspace Operations-Internal Defensive Measures on behalf of the NGA on NGA networks and systems;
  • Performs digital media analysis and malware reverse engineering on host, server, and network data as required to analyze and respond to an incident, including but not limited to volatile and non-volatile memory and/or system artifact collection and analysis.
  • When properly authorized by the Government, execute custom scripts, tools, and capabilities to collect and analyze data, and respond to incidents/events;
  • Develops, documents, and provides the Government incident investigation reports which include sufficient information to document the entire lifecycle of the incident and the response, including but not limited to adversary and friendly forces activity, host and network analysis, timelines, and recommendations for corrective actions, recommendations for new Tactics, Techniques, and Procedures (TTP) and other recommendations as appropriate, within 30 days of C-IRT stand-down;
  • Conduct Quality Control reviews of a percentage of closed CSOC Tier 2 tickets each week to ensure proper analysis, categorization, documentation, and notification;
You'll Bring These Qualifications:
  • Must be a US Citizen with an Active TS/SCI to start work, but required to obtain a CI Poly within 6 months.
  • Typically has a University Degree (BA/BS) or equivalent experience and minimum 4 years of related work experience
  • All Contractor personnel performing CSOC Tier 3 services shall have a certification that is compliant with DoD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Analyst Certification.
  • Ability to work 1 or more of 5 work shifts

These Qualifications Would be Nice to Have:
  • IAT Level III
  • Active TS/SCI w/poly
  • 5+ years of related CSOC tier 2 or 3 work experience


  • St Paul, United States Blue Star Partners, LLC Full time

    Job Description Job Description Job Title: Senior Cybersecurity Analyst Location: St. Paul, MN – Onsite – Local candidates only Period: 05/13/2024 to 12/20/2024 – possibility of extension Hours/Week: 40 hours Rate: $40-$45/hour (Hours over 40 will be paid at Time and a Half) Contract Type: W-2 Scope of Services: The Senior Cybersecurity Analyst...


  • St Louis, United States Stifel Full time

    Summary Under general supervision, the IT Security Governance Analyst II is a front-line member of the IT Security Program team responsible for the overall management of the IT Security Program. The IT Security Governance Analyst is responsible for supporting internal, external, and client audits, managing security risks within a GRC solution, and assessing...


  • St Louis, United States InterVision Systems Full time

    Are you looking for a challenging role as a Sr. Cybersecurity Engineer - Operations Center? As a leading managed service provider (MSP), InterVision assists IT leaders in solving the most crucial challenges they face by solving for the right technology, deployed on the right premises, and managed through the right model to fit their unique demands and meet...

  • Business Analyst II

    4 weeks ago


    St Louis, United States Stifel Financial Full time

    Summary The Business Integration Business Analyst II will coordinate the development of small to large scale projects from conception to implementation. This position will analyze, design, and document system requirements with business area(s) sponsoring the project. Acts as the liaison between business owners, technical analyst, IT and application vendors...


  • St Louis, United States Stifel Full time

    Summary The IT Project Manager II (PM) directs the design and development of new application programs for specified projects. The Project Manager II is responsible for the planning, implementing, and tracking of projects for a specific Operations area(s). This role must communicate with internal departments and third-party vendors to manage the department's...


  • St Paul, United States Blue Star Partners, LLC Full time

    Job Title: Senior Cybersecurity Specialist Location: St. Paul, MN – Onsite – Local candidates only Period: 05/13/2024 to 12/31/2024 – possibility of extension Hours/Week: 40 hours  Rate: $40-$50/hour (Hours over 40 will be paid at Time and a Half) Contract Type: W-2  Scope of Services: The Senior Cybersecurity Specialist contributes to the...

  • IT Project Manager II

    2 weeks ago


    St Louis, United States Stifel Full time

    Summary The IT Project Manager II (PM) directs the design and development of new application programs for specified projects. The Project Manager II is responsible for the planning, implementing, and tracking of projects for a specific Operations area(s). This role must communicate with internal departments and third-party vendors to manage the department's...

  • IT Project Manager II

    4 weeks ago


    St. Louis, United States Stifel Full time

    SummaryThe IT Project Manager II (PM) directs the design and development of new application programs for specified projects. The Project Manager II is responsible for the planning, implementing, and tracking of projects for a specific Operations area(s). This role must communicate with internal departments and third-party vendors to manage the department's...

  • Cyber Hunt Level II

    2 weeks ago


    St Louis, United States Strategic ASI Full time

    What You'll Get to Do: Our client is hiring a new member to our Cyber Security Hunt Services team. This role will proactively search for indicators of compromise on NGA systems through planned Hunt missions. Assign the Cybersecurity Operations Manager to direct and oversee all Contractor support for this sub-service and serve as the primary...


  • St Louis, United States ARCO a Family of Construction Companies Full time

    ABOUT YOU: Are you an out of the box thinker? Are you passionate about solving business problems with the latest technology? If the answer is, Yes! then we have an exciting, internship opportunity for you. Who are we? We are ARCO, a Family of Construction Companies. We are looking for a Cybersecurity Intern for our St. Louis office to work with our...

  • Data Analyst II

    7 days ago


    St Louis, United States TalentBridge Full time

    Position: Data Analyst IIJob Type: Contract to Hire (will eventually convert to an FTE)Location: St. Louis, MO (Hybrid) Job Description:Performs data collection, analysis, validation and reporting. Designs, tests, and documents processes, SQL queries, and stored procedures. Extracts and analyzes data from various sources, including databases, manual files,...

  • Data Analyst II

    7 days ago


    St Louis, United States TalentBridge Full time

    Position: Data Analyst IIJob Type: Contract to Hire (will eventually convert to an FTE)Location: St. Louis, MO (Hybrid) Job Description:Performs data collection, analysis, validation and reporting. Designs, tests, and documents processes, SQL queries, and stored procedures. Extracts and analyzes data from various sources, including databases, manual files,...


  • St Louis, United States SITEC Consulting LLC Full time

    Position Overview: Provide CSOC Tier 2 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents. CSOC Tier 2 services includes malware and implant analysis, and forensic artifact handling and analysis. When a CIRT is stood up, all...


  • St Louis, United States SITEC Consulting LLC Full time

    Position Overview: Provide CSOC Tier 2 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents. CSOC Tier 2 services includes malware and implant analysis, and forensic artifact handling and analysis. When a CIRT is stood up, all...


  • St. Louis, United States Envision LLC Full time

    Job DescriptionAll candidates that where submitted to this role have been passed on.We are requesting new resumes, please do not resubmit previous candidates.ERP Analyst III – Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid position working in the...


  • St Louis, United States Envision Full time

    Job Description All candidates that where submitted to this role have been passed on. We are requesting new resumes, please do not resubmit previous candidates. ERP Analyst III – Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid position working in the...


  • St. Louis, United States Envision LLC Full time

    Job Description@STL RecruitersUpdate 4/24**All candidates that where submitted to this role have been passed on.We are requesting new resumes, please do not resubmit previous candidates.ERP Analyst III – Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid...

  • ERP Analyst II or III

    7 hours ago


    St Louis, United States Envision Full time

    Job Description @STL Recruiters Update 4/24**All candidates that where submitted to this role have been passed on.We are requesting new resumes, please do not resubmit previous candidates. ERP Analyst III Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid...


  • Saint Louis, United States InterVision Systems Full time

    Job DescriptionJob DescriptionAre you looking for a challenging role as a CyberSecurity Consultant?As a leading managed service provider (MSP), InterVision assists IT leaders in solving the most crucial challenges they face by solving for the right technology, deployed on the right premises, and managed through the right model to fit their unique demands and...

  • Program Specialist II

    2 weeks ago


    St Louis, United States City of St. Louis Department of Personnel Full time

    Program Specialist II (Airport Security Operations) View all jobs (index.cfm) Apply Department: Airport Authority Salary + Minimum: $36,686.00 + Maximum: $54,782.00 Normal entry salary is $36,686. Position Specifications This position involves a variety of airport security-related duties for the St. Louis Lambert International Airport (STL) Security...