Cyber Security Analyst – SME

This is a fully remote position, open to applicants in United States.

📋 Description

• Maintain distinct security evidence mapping for both Infrastructure and Application pipelines.

• Ensure that artifacts comply with necessary controls at every stage of the CI/CD process.

• Enforce gating criteria in pipelines to prevent deployments to production without the necessary security evidence and approvals.

• Execute, monitor, test, and troubleshoot Information Assurance issues related to hardware and software across computing, network, data platforms, and enclave environments.

• Gather and analyze data and events from Computer Network Defense tools, including system alerts, firewall logs, network traffic logs, and host system logs.

• Evaluate and identify systems and networks that align with acceptable configurations and policies.

• Develop and oversee security across various IT functional areas, including data, systems, networks, and web services.

• Lead the creation and implementation of security policies and procedures.

• Present and brief stakeholders on security status reports.

• Develop scenarios for security risk analysis and corresponding response procedures.

• Monitor and track software viruses and other forms of malicious code.

• Direct the evaluation of products and procedures to improve productivity and effectiveness.

• Provide direct security-related assistance to business and IT personnel.

• Collaborate with DevSecOps, engineering, and governance teams to incorporate security and compliance requirements into release and deployment workflows.

⛳️ Requirements

• Over 7 years of relevant experience.

• Bachelor’s degree (BS/BA), with equivalent experience considered in lieu of a degree.

• Proven experience in project leadership, monitoring computer networks and security issues, and investigating and resolving security and cybersecurity incidents.

• Experience in documenting security incidents and conducting security vulnerability assessments.

• Familiarity with Agile teams and SAFe methodologies for testing and identifying system and network vulnerabilities.

• At least 3 years of experience in AWS Cloud Security; certification is preferred.

• A minimum of 4 years of prior ATO experience within an AWS environment for a large agency.

• Strong understanding of NIST standards.

• Over 4 years of experience with the ATO process, FedRAMP, CIS, and ISO 27001.

• Comprehensive knowledge of ICAM, SIEM, and vulnerability management tools.

• Experience with CSAM or similar platforms.

• Knowledge of data governance, metadata management, and data quality practices.

• Proficient in SQL for data querying and validation.

• Skilled with Power BI, Tableau, or QuickSight.

• Familiarity with statistical analysis tools/techniques such as Excel, R, or Python is preferred.

• Experience with cloud data platforms like Snowflake, Databricks, or AWS is preferred.

• Understanding of data architecture concepts such as data lakes, lakehouses, and warehouses.

• Strong analytical, problem-solving, and statistical analysis abilities.

• CISSP certification is preferred.

• Excellent oral and written communication and presentation skills.

• Ability to engage effectively with high-level customer stakeholders and foster customer relationships.

• Experience in identifying and applying industry tools, solutions, methods, best practices, and emerging technologies.

• Capability to work independently as well as collaboratively within a team.

• Ability to translate technical security findings into risk-based guidance.

• US citizenship is not required.

• No security clearance is necessary.

🏝️ Benefits

• Options for medical plans, some of which include Health Savings Accounts.

• Options for dental plans.

• Vision plan availability.

• 401(k) plan with pre-tax and post-tax contributions along with company matching.

• Flexible work weeks, where applicable.

• Vacation, sick, and personal time off.

• Paid holidays.

• Paid parental leave.

• Military leave provisions.

• Bereavement leave.

• Jury duty leave.

• Up to 160 hours of paid family leave within a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits.

• Life insurance options.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.