Cyber Security Analyst

Cybersecurity Analyst
Marcus Hook, PA (Hybrid)
Contract role

We are seeking a Mid-Level Cybersecurity Analyst to play a critical role in the safeguarding of our client's critical systems and data. As a Cybersecurity Analyst, the individual will be responsible for supporting the organization's cybersecurity programs and daily activities of Security Operations Center/MSSP. The candidate must have a strong technical and operational background and be process focused. The candidate must have the ability to manage multiple priorities at the same time, quickly evaluate risks, and articulate security concerns in both a technical and business friendly manner.

Responsibilities:
• Coordinate with support team to ensure the hardening of systems under test to conforms all applicable regulations from CISA, TSA, and Coast Guard.
• Supports the maturing of the organization's cybersecurity detection capabilities.
• Recommends, configures, enhances, and maintains relevant security systems and tools.
• Monitors and responds to security alerts, notifications, and critical issues.
• Maintains Incident Response Plan (IRP), event and management runbooks.
• Assist in the continuous development of vulnerability management program.
• Actively streamline and simplify workflows and processes; Use automation and orchestration for improved efficiencies where possible.
• Partners with managed services as it relates to emerging threat intelligence.
• Manages and contains information security incidents and events to protect critical assets, intellectual property, related data, and the company's reputation.
• Maintains security focused programs to ensure the organization is prepared to detect, respond, and recover from a cyber-attack.
• Promotes best practices, implements, and maintains critical security controls, supporting processes and procedures.
• Provides mentorship, advice, and skill enhancement to junior team members.
• Participates in on-call after-hours support to ensure that critical performance issues are resolved, and security events and incidents are addressed in a timely manner, in accordance with internal SLAs.
• Develops and maintains Key Performance Indicators (KPIs) and metrics, providing weekly and monthly reports to senior management.

Required Skills:
• 4-year degree in Cybersecurity or related combined work/education experience.
• Minimum 5 years' relevant work experience in the field of cybersecurity.
• Certified Information Systems Security Professional (CISSP) preferred.
• Experience in event analysis, using log sources and packet capture technologies and techniques.
• Strong hands-on experience in related cybersecurity technologies and tools. Including but not limited to Cisco Next Generation Firewalls (NGFW), Azure/Cloudflare Web Application Firewalls (WAP), Network Access Control (NAC), CrowdStrike Endpoint Detect and Response (EDR), Rapid7 insightIDR/insightVM/SIEM, and Office 365 security.
• Experience in security related programs. Including but not limited to vulnerability and patch management, application security, IoT security, and mobile security.
• Knowledge of or hands on experience in secure configuration management and system hardening.
• Experience in computer forensics and cyber incident investigations a plus.
• Strong knowledge of TCP/IP, DNS, NAT, and the OSI Model.
• Experience with NIST Controls, the NIST Cyber Security Framework (CSF).
• Strong operational and processing background.
• Strong verbal and written communication skills.
• Strong attention to detail, well-organized, and able to manage time efficiently.
• Team player with ability to deal effectively with individuals at all levels.