Cyber Security Analyst

Cybersecurity AnalystScientific Research Corporation (SRC) is an advanced information technology engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. SRC is searching for a highly skilled and experienced Cybersecurity Analyst to manage and respond to cyber threats, focusing on processing Cyber Tasking Orders (CTOs), analyzing Security Operations Center (SOC) alerts, and conducting comprehensive threat intelligence activities. The ideal candidate will have at least 3 years of combined cybersecurity experience, including 2+ years in a SOC or Cyber Security Analyst role within SIPRNET or NIPRNET environments, and 2+ years in Windows and/or Linux system administration, along with an active DoD 8140 Workforce Certification. Key responsibilities include evaluating vulnerabilities, developing mitigation strategies, tracking zero-day threats, and preparing detailed threat intelligence reports and briefings for various stakeholders.Processing, coordinating, tracking, analyzing, documenting, and reporting Cyber Tasking Orders (CTOs) and high interest itemsAssessing, analyzing, and remediating Security Onion Console (SOC) alerts or other SIEMsEvaluating security vulnerabilities, developing mitigation strategies, implementing remediation activities, and creating Plans of Action and Milestones (POA&Ms)Administering systems in Windows 11, Windows Server 2019, 2022, or 2025, or Red Hat Enterprise Linux (RHEL) 8x or 9xMonitoring, collecting, and analyzing cyber threat intelligence from internal and external sources, including vendors and open-source intelligenceResearching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clientsIdentifying emerging threats, assessing potential mission impact, and providing actionable recommendations to reduce riskTracking zero-day vulnerabilities and high-risk CVEs, including preparing reports with potential impact, mitigation steps, and remediation guidanceDeveloping and publishing tactical, operational, and strategic threat intelligence reports for cybersecurity teams, stakeholders, and executive leadershipConsolidating and evaluating cyber threat intelligence feeds to improve the quality, relevance, and timeliness of threat assessmentsAnalyzing internal security risks and threat exposure to identify potential weaknessesResponding to customer or stakeholder requests for information related to cyber threats, vulnerabilities, and risk trendsPreparing briefings and executive summaries that communicate cyber risks in clear, non-technical languageDeveloping and maintaining documentation, procedures, and playbooks related to threat intelligence and response processesEnsuring that security design and distribution actions are evaluated, validated, and implemented as requiredEnsuring that cybersecurity requirements are integrated into the architecture for the system or organizationEvaluating development efforts to ensure that baseline security safeguards are planned for and appropriately installedIdentifying alternative security strategies to address organizational security objectives of cyber taskingsAssessing DoW security requirements and DISA Security Technical Implementation Guides (STIGs)Coordinating with other system SMEs to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventoriesRequirementsThree or more years of combined cybersecurity experience holding one or more of the following roles: ISSO, Cyber Security Analyst, and/or Systems/Network AdministratorTwo or more years of experience working Security Operations Center (SOC)/Cyber Security Analyst either in SIPRNET or NIPRNET environmentsTwo or more years of experience working with Windows and/or Linux systems administrationActive DoD 8140 Workforce Certification (e.g. Security+ CE, CISSP, CySA+, GCFA, etc.)Desired SkillsExperience working in DevSecOps (CI/CD) environmentsKnowledge of cybersecurity principles and DoD requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)Knowledge of IT security principles and methods (e.g., firewalls, demilitarized zones, encryption, Zero Trust)Ability to communicate and establish collaborative relationships with government clients and associate contractor teammates to achieve program goalsClearance InformationSRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITYTravel RequirementsLess than 10%About UsScientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.EEOScientific Research Corporation is an equal opportunity employer that does not discriminate in employment.All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.Scientific Research Corporation endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact View email address on click.appcast.io for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.