Cyber Security Analyst

Boston Government Services, LLC (BGS) is an engineering, technology, and security firm that supports government programs and national security facilities. They are seeking a Cyber Security Analyst to assist with monitoring and analyzing security threats, managing user accounts, and executing security playbooks.

What you'll do:

• Resetting user passwords for cause (e.g., when they have been identified as being suspected compromised or 'known compromised')
• Working with service owners to reset service account passwords for various reasons
• Ensuring authorizers are designated for in-scope accounts
• Analyzing usage patterns for accounts (e.g., service, administrative) to identify inactive accounts or inappropriate account use
• Reviewing approval requests for various new access or accounts
• Triaging unusual access requests (e.g., access from 3 rd party VPN providers, impossible travel) or phishing reports
• Evaluate endpoint and detection response (EDR) installation and coverage
• Identify systems without EDR and provide to IT teams for remediation
• Monitoring external attack surface for unapproved systems, undocumented systems, and newly disclosed vulnerabilities
• Reviewing systems with existing public access to ensure requirements for these systems are followed (e.g., event logging, multifactor authentication)
• Attend online/Teams meetings with team and others as appropriate
• Work with team to provide status on current task, suggest improvements, discuss implementation, etc

What they're looking for:

• 1–3 years in a SOC, cyber security 'blue team', or closely related role
• Strong grasp of TCP/IP, OSI model, and common protocols (HTTP, DNS, SMTP). Windows/Linux/macOS fundamentals; Active Directory/Azure AD concepts; basic cloud logging
• Experience with at least one SIEM and one EDR/XDR platform
• Experience with ticketing/case management
• Ability to craft queries using common languages; comfort with regex, JSON and APIs; basic scripting in Python/PowerShell/Bash
• Excellent analytical, problem-solving, and communication skills both with stakeholders, peers, and internal customers; able to operate under pressure in a shift or on-call environment
• Must be a U.S. citizen
• Successful drug screening
• Experience in system and network administration
• Staying up to date with the latest cyber security threats, vulnerabilities, and best practices
• Strong analytical and problem-solving skills
• Meticulous attention to detail to ensure thorough assessments and accurate reporting

Benefits:

• Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability