Security Analyst

Security Analyst

Overview

We are seeking a dedicated Security Analyst to join our team supporting TSA operations in Chantilly/Herndon. This role involves monitoring and analyzing security events reported by the TSA SIEM to identify and investigate suspicious or malicious activity. The ideal candidate possesses strong organizational skills, technical expertise in cybersecurity, and experience working in a dynamic, 24/7 security environment. This opportunity offers a chance to contribute to critical national security efforts with a reputable agency.

Education Requirements

Bachelor's Degree

Certification Requirements

Security +

Clearance Requirements

Secret Clearance

Work Arrangement

On-Site at Chantilly/Herndon

Responsibilities

• Monitor and analyze security events and alerts from the TSA SIEM 24x7 to identify malicious activity.
• Investigate security incidents, discern legitimate threats, and document findings.
• Work with ticket management systems to track security investigations and incident reports.
• Monitor the operational status of security components and escalate outages as necessary.
• Analyze security event logs from various operating systems including Windows, macOS, and Linux.
• Review network communications and routing protocols to identify anomalies or malicious activities.
• Implement counter-measures and mitigation controls within enterprise networks to enhance security.

Required Qualifications

• 1 year of experience in cybersecurity, with proficiency in Splunk, Trellix, CrowdStrike, or similar endpoint detection tools.
• Experience working with security information and event management (SIEM) platforms.
• Knowledge of network communication protocols such as TCP, UDP, ICMP, BGP, MPLS.
• Ability to analyze security event logs to identify potential threats.
• Strong organizational and analytical skills with attention to detail.
• Experience working in a Security Operations Center environment.
• Bachelor's Degree in a related field or equivalent experience.
• Minimum of Security+ certification.

Desired Skills

• Experience with Elastic, Sentinel, or similar security tools.
• Familiarity with Windows Active Directory and enterprise network environments.
• Knowledge of incident response procedures and security counter-measures.

Pay Range

Pay range: $70,000.00–$100,000.00 (annual).

This pay range is based on qualifications and experience, and assumes all role requirements are met.

Why Apply

This role offers the opportunity to be part of a vital security team supporting national infrastructure. If you are ready to leverage your cybersecurity skills in a challenging and rewarding environment, we encourage you to apply and join our dedicated team committed to safeguarding critical assets.