Cyber Security Analyst I

Summary Statement: Under general supervision, Cyber Security Analyst I investigates computer and information security incidents to determine and resolve potential breaches and vulnerabilities; uses and maintains information security tools necessary to ensure the secure operation of IDA’s information system infrastructure; and supports all aspects of incident response as directed by senior analysts.

Primary Responsibilities:    

1.      Executes Information Security Monitoring

·         Monitors and analyzes information security alerts from network devices and endpoints

·         Responds to and directs the response to information security incidents

·         Analyzes indicators of compromise for use in detection

2.      Monitors the cyber security infrastructure

·         Verifies systems are operating as expected

·         Identifies any issues and applies mitigations as appropriate 

·         Alerts senior analysts to complex issues

3.      Supports Media Forensics and Malware Analysis

·         Analyzes files and systems with provided tools

·         Identifies potential malware and vulnerabilities of analyzed files

·         Applies mitigations or remediations to systems with identified malware or vulnerabilities

4.      Supports Incident Response

·         Hunts for possible compromises

·         Creates scripts to automate repetitive tasks

·         Analyzes systems for possible compromise

·         Works with senior analysts to mitigate or remediate any compromise

·         Documents all findings

5.      Performs other duties as assigned.

Minimum Job Qualifications:

Education/Experience:

·         Bachelor’s degree in computer science, computer security, or related discipline or equivalent experience in a related field.

·         One year of experience in Information Technology.

Knowledge/Skills/Abilities:

• Familiarity with basic cyber-security and information technology concepts (but not limited to): firewalls, networking, DNS, host security hardening, anti-virus software, and network/computer exploitation techniques.

•  Familiarity with system and network vulnerabilities, intrusion monitoring, network mapping, auditing and intrusion detection systems, notification of Internet threats, and forensic response preferred.

• Familiarity with notification of Internet threats, alerts, and vulnerabilities preferred.

• Must be self-motivated and able to work with minimal supervision.

• Excellent written, oral communications, and interpersonal skills with the ability to interface with all levels of employees.

• Possesses or ability to obtain within six months an information security certification commensurate with DoW 8140.03 (CompTIA, GIAC, or similar).

• Ability to obtain and maintain appropriate security clearance.

   We support transparency, equity, and fairness in our compensation program and provide a reasonable estimate of the salary range based on data-driven market analysis for each position. While it is not typical for an individual to be hired at or near the top of the range, a reasonable estimate of the salary range for this role is $74,931-$119,889. Individual salary within this range will be commensurate with the incumbent’s experience, unique skills and qualifications, and other relevant factors.