Cybersecurity Analyst - Tier 2 (On-Site)

Location Hines Information Technology Center (ITC) Building 215, 1st Avenue, North of 22nd Street, Hines, Illinois 60141 Position Description The Cybersecurity Analyst - Tier 2 safeguards the Department of Veterans Affairs (VA) digital assets and responds to, investigates, and mitigates potential cyber threats. Minimum/General Experience 3 years of experience supporting incident response in an enterprise-level Security Operations Center (SOC) Minimum Education Bachelors degree in computer science, cybersecurity, information technology or related field; must have or be willing to obtain one of the following certifications: GIAC Certified Incident Handler, EC-Council's Certified Incident Handler (E|CIH), GIAC Certified Incident Handler (GCIH), Incident Handling & Response Professional (IHRP), Certified Computer Security Incident Handler (CSIH), Certified Incident Handling Engineer (CIHE), EC-Council's Certified Ethical Hacker Essential Skills/Qualifications Above average understanding of cybersecurity principles and incident response methodologies Strong experience with security technologies (SIEM, IDS/IPS, EDR, network monitoring tools) Experience with enterprise ticketing systems (ServiceNow) Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions Ability to learn and function in multiple capacities Ability to be proactive in a high‑pressure environment to ensure SOC operates effectively Excellent analytical and problem‑solving skills Excellent verbal and written communication skills Ability to work third shift (10:30PM ET - 7:00AM ET) to support 24/7 cybersecurity operations Physical Requirements Assignment Location: Hines Information Technology Center (ITC) Building 215, 1st Avenue, North of 22nd Street, Hines, Illinois 60141 Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects. Typing, communicating, repetitive motions. Close visual acuity to prepare and analyze data, view computer monitors and read; may need to view presentation screens and other visual aids in a virtual setting. Inside environmental conditions with protection from outside elements. Security Clearance Requirements Ability to obtain/maintain a Federal Civilian Public Trust. U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years. Tasks/Activities Real‑time monitoring and triage of security alerts in cybersecurity toolsets including SIEM and EDR. Determine false positives or require further investigation and prioritization. Lead and actively participate in the investigation, analysis, and resolution of cybersecurity incidents. Analyze attack patterns, determine root cause, and recommend appropriate remediation. Ensure accurate and detailed documentation of incident response activities. Collaborate with knowledge management teams to maintain incident response playbooks. Collaborate effectively with cross‑functional teams, including forensics, threat intelligence, IT, and network administrators. Communicate clear technical information and incident‑related updates to management and stakeholders. Identify and act on opportunities for tuning alerts to improve efficiency. Monitor performance of security analytics and automation processes; identify areas for improvement. Leverage SOAR platforms to streamline and automate incident response processes. Support mentoring and training of junior incident response staff. Stay informed about latest cybersecurity threats, trends, and best practices. Participate in cybersecurity exercises, drills, and simulations to improve incident response capabilities. Compensation & Benefits The annual projected pay range for this position is $93,538.00 – $103,319.00, with consideration given to qualifications, experience, job responsibilities, and geographic location. Medical, dental, vision and prescription drug coverage for you and your family. Life Insurance, short‑term disability and long‑term disability paid for by the Company. Supplemental coverages including Accident, Critical Illness, and Hospital. Additional Life insurance coverage for you and your dependents. 401k plan with various options to select based on your retirement goals. Equal Employment Opportunity All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local law. #J-18808-Ljbffr