CYBER SECURITY OPERATIONS ANALYST-CONTINUOUS MONITORING

$74,000 - $146,000/Yr

Quantum Research International - Huntsville, AL

Full-time - Mid Level

Onsite - Huntsville, AL

Computer and Electronic Product Manufacturing

About the position

Quantum Research International, Inc. (Quantum) is seeking a Cyber Security Operations Analyst for its Continuous Monitoring (ConMon) Program. This role is critical in supporting the National Cyber Security Operations Center (NSCOC) located in Huntsville, Alabama. As a member of a skilled team of cyber security operators, you will be responsible for evaluating technology, processes, procedures, operating environments, and personnel to maintain ongoing awareness of information security, vulnerabilities, and threats. This position plays a vital role in supporting organizational risk management decisions and ensuring the security of the IT infrastructure. In this role, you will conduct Continuous Monitoring of designated client organizational IT infrastructure utilizing Security Information and Event Management (SIEM) tools, specifically Splunk. You will participate in incident response activities and apply various government standards, policies, and regulations, including DOD, NIST, and FISMA, to execute the ConMon Program effectively. Your responsibilities will also include validating the ConMon Strategy, developing a ConMon Strategy Gap Analysis Report, and identifying program gaps while recommending solutions to address them. Additionally, you will review risk tolerance within the enterprise architecture and security configurations, assist in developing and tracking ConMon metrics, and validate the information collection and reporting process. This position requires a Bachelor’s degree in a relevant field or equivalent experience, along with a minimum of three years of comparable work experience in enterprise security. The ideal candidate will possess excellent knowledge of network, operating system, and application security, along with relevant certifications such as Splunk Core Certified User and IAT Level II. A DoD Security Clearance is also required for this position.

Responsibilities

• Conduct ConMon of designated client organizational IT infrastructure utilizing SIEM tools (Splunk).
• Participate in Incident Response Activities.
• Use DOD, NIST, FISMA, and other government standards, policies and regulations when executing the ConMon Program.
• Assist in validating ConMon Strategy and developing a ConMon Strategy Gap Analysis Report.
• Identify ConMon program gaps and recommend solutions to address gaps.
• Review risk tolerance within the enterprise architecture, security architecture, and security configurations.
• Assist in the development and tracking of ConMon metrics such as vulnerabilities discovered and remediated.
• Assist with validating the ConMon information collection and reporting process.

Requirements

• Bachelor of Science (BS) in CIS, technical/engineering or equivalent field of study; or 5 years of experience with viable IT cyber security certifications.
• Three (3) years of comparable work experience in enterprise security.
• Excellent knowledge of network, OS, and application security.
• Splunk Core Certified User Certification.
• IAT Level II (Current GSEC, Security+ with evidence of continuing education, SSCP, or CCNA-Security).
• Must be able to obtain/maintain a DoD Security Clearance.

Nice-to-haves

• CND-AU (Current CISA, GSNA or CEH certification).
• Splunk Core Certified Power User.
• Active Secret Security Clearance.