Cyber Security Analyst I

Summary Statement: Under general supervision, Cyber Security Analyst I investigates computer and information security incidents to determine and resolve potential breaches and vulnerabilities; uses and maintains information security tools necessary to ensure the secure operation of IDA's information system infrastructure; and supports all aspects of incident response as directed by senior analysts.

Primary Responsibilities:

1. Executes Information Security Monitoring

* Monitors and analyzes information security alerts from network devices and endpoints

* Responds to and directs the response to information security incidents

* Analyzes indicators of compromise for use in detection

2. Monitors the cyber security infrastructure

* Verifies systems are operating as expected

* Identifies any issues and applies mitigations as appropriate

* Alerts senior analysts to complex issues

3. Supports Media Forensics and Malware Analysis

* Analyzes files and systems with provided tools

* Identifies potential malware and vulnerabilities of analyzed files

* Applies mitigations or remediations to systems with identified malware or vulnerabilities

4. Supports Incident Response

* Hunts for possible compromises

* Creates scripts to automate repetitive tasks

* Analyzes systems for possible compromise

* Works with senior analysts to mitigate or remediate any compromise

* Documents all findings

5. Performs other duties as assigned.

Minimum Job Qualifications:

Education/Experience:

* Bachelor's degree in computer science, computer security, or related discipline or equivalent experience in a related field.

* One year of experience in Information Technology.

Knowledge/Skills/Abilities:

• Familiarity with basic cyber-security and information technology concepts (but not limited to): firewalls, networking, DNS, host security hardening, anti-virus software, and network/computer exploitation techniques.

• Familiarity with system and network vulnerabilities, intrusion monitoring, network mapping, auditing and intrusion detection systems, notification of Internet threats, and forensic response preferred.

• Familiarity with notification of Internet threats, alerts, and vulnerabilities preferred.

• Must be self-motivated and able to work with minimal supervision.

• Excellent written, oral communications, and interpersonal skills with the ability to interface with all levels of employees.

• Possesses or ability to obtain within six months an information security certification commensurate with DoW 8140.03 (CompTIA, GIAC, or similar).

• Ability to obtain and maintain appropriate security clearance.

  We support transparency, equity, and fairness in our compensation program and provide a reasonable estimate of the salary range based on data-driven market analysis for each position. While it is not typical for an individual to be hired at or near the top of the range, a reasonable estimate of the salary range for this role is $74,931-$119,889. Individual salary within this range will be commensurate with the incumbent's experience, unique skills and qualifications, and other relevant factors.