Security Analyst/Incident Responder

Bachelor's degree in a related field or equivalent demonstrated experience and knowledge.

6 years’ experience as a Security Administrator or equivalent knowledge.

Hands-on experience conducting incident response activities and vulnerability analysis of various systems, applications, security tools, databases, and networks logs.

Performing vulnerability scans with tools such as Tenable or Qualys.

Experience with Crowdstrike, TenableSC, Splunk. (Experience with comparable tools may be considered).

Experience with NIST SP 800-61 rev2 Computer Security Incident Handling Guide.

Excellent oral and written communication skills.

Familiarity with multi-tiered network applications, common ports and protocols used in those communications, the Common Vulnerability System (CVS) and the exploitation mechanisms of common vulnerability types (e.g., buffer overflows, cross-site-scripting, SQL injection).

Ability to perform online research and comprehend attack signatures while comparing them to network traffic to perform proper analysis of detections.

Ability to use common tools such as Wireshark to examine network traffic.

Certifications: Security + required.

Self-Starter – ability to quickly become competent with new security-related tools and processes.

Ability to conduct Deep Dive analysis to determine root cause assessment of various network scanning agents’ scanning or communication failures.

Ability to coordinate remediation strategies with agency’s department technical staff through completion.

Familiarity with the various use cases and alignment of data from each tool to various security disciplines in configuration management, vulnerability management, risk management and incident management.

Understanding of the role of interactive training such as phishing exercises for assessment of organizational abilities.

Familiarity with the use of data analysis tools, including the use of Microsoft Excel or PowerBI to combine data from multiple sources.

Familiarity with information security terminology and being able to develop or select technical training in the discipline of information security geared to an organization.

Familiarity with data management and reporting of training data and statistics using common tools such as Microsoft Excel and Word.

Benefits 

About AnaVation 

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.  

 

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you! 

 

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.