Cyber Security Analyst III

Cyber Security Analyst III

PlanIT Group is seeking a Cyber Security Analyst III to support our Federal customer in the Washington, DC area. The ideal candidate must demonstrate a solid understanding of cyber security analysis, incident response, incident handling, and a proven experience on an incident response team. Experience with Splunk, Sentinel One, Armis, SNA preferred.

Location: Remote or Raleigh, NC

Start Date: 03/24/25

Duration: One year plus annual extensions (Remote support will be considered, candidates local to Raleigh NC will be given preference)

Responsibilities:

• Respond to cyber security incidents, provide cyber threat analysis and reporting to support SOC and Program's situational awareness.

• Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.

Most critical requirement:

• Must demonstrate a solid understanding of cyber security analysis, incident response, incident handling, and a proven experience on an incident response team. Experience with Splunk, Sentinel One, Armis, SNA preferred.

Duties:

• Responsible for developing procedures and policies for initial stand up of a security operations center (SOC) and ongoing management of the SOC.

• Support Tier 2 operations by monitoring alerts during critical and high-volume events.

• Conduct more in-depth analyses of security incidents to identify incidents of compromise.

• Perform intrusion scope and root cause analyses and assist with intrusion remediation, strategy development, and implementation. Recommend effective process changes to enhance defense and response procedures.

Experience Level:

• 5-7 years of related experience on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC).

Education:

Bachelor's Degree in Computer Science, Information Technology, or Information Security

Certifications: (One or more required)

CompTIA Security + CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker GCIH - (GIAC Certified Incident Handler) or ECIH - (EC-Council Certified Incident Handler) CISA - Certified Information Systems Auditor

Additional Provisions:

• Must be able to obtain a Public Trust Clearance • Pass both a client mandated clearance process to include drug screening, criminal history check and credit check. • All candidates must be a US Citizen or US Permanent Resident / Green Card required • Candidate must have lived in the United States for the past 5 years. • Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.) #CJJOBS