Cybersecurity Operation Analyst 25-E-03

Cybersecurity Operations Analyst

Under the direction of the Chief Information Security Officer, the Cybersecurity Operations Analyst will be responsible for day-to-day security event monitoring and the operational integrity of the organization's information security toolsets. They will identify, investigate, document, and report on activities that do not adhere to policies, or are otherwise deemed suspicious. Additionally, they will be responsible for creating operational dashboards and will regularly report key performance indicators and metrics.

The Cybersecurity Operations Analyst will be a key point of contact within Information Security, responsible for responding to escalations, and will assist with audit responses, compliance, and information security control testing.

This position requires a bachelor's degree in Computer Science, Information Systems or Information/Cybersecurity or related field and a minimum 3-5 years' work experience in technology support, security operations, incident response, and/or event handling. A minimum of 3 years of experience with security products including: IPS/IDS, AV, Anti-Malware, User Behavior Analytics, DLP, MFA, Network Proxies, Sensitive Data Scanning, and Content Filtering is preferred. At least one information security certification such as Security+, PenTest+, GCIA, CCNA, OSCP or CISSP is a plus.

Experience with Security Information and Event Management (SIEM) platforms, vulnerability management and remediation tools and coordinating patching, windows configuration changes and other remediation tasks is preferred. Familiarity with developing content and anomaly detection routines using regular expressions and/or Python, C, C++ is preferred. Significant knowledge regarding current cybersecurity trends, best practices, and threat actor techniques is highly desired.

Ability to effectively coordinate, prioritize, and collaborate along with outstanding written and verbal communication skills. Attendance and the ability to maintain satisfactory working relationships with OAG employees and the general public is required.