Cybersecurity Analyst II (Threat Detection & Investigation)

Washington Metropolitan Area Transit Authority - Alexandria, VA

Full-time

Alexandria, VA

Transit and Ground Passenger Transportation

About the position

The Cybersecurity Analyst II (Threat Detection and Investigation) at the Washington Metropolitan Area Transit Authority (WMATA) is responsible for safeguarding critical transit infrastructure through continuous monitoring and analysis of security events. This role involves detecting and mitigating potential threats, optimizing security tools, and collaborating with various teams to enhance threat management and incident response. The analyst will also contribute to the development of workflows and processes to improve the overall cybersecurity posture of the organization.

Responsibilities

• Continuously monitor security events across various tools to detect and mitigate potential threats.
• Optimize SIEM rules, alerts, and other security tools to enhance visibility and improve incident response.
• Manage proactive detection of threats by importing Indicators of Compromise (IOCs) into monitoring tools.
• Conduct root cause analysis to understand the origin and spread of incidents.
• Collaborate with teams across incident response, threat intelligence, and threat hunting for comprehensive threat management.
• Configure and optimize tools like SIEM, IDS/IPS, and EDR systems.
• Automate log analysis and detection processes.
• Perform behavioral analysis to identify insider threats.
• Generate routine and urgent reports to support enhanced security procedures and response measures.
• Investigate and analyze all relevant incident response activities.

Requirements

• Bachelor's degree from an accredited college or university.
• Two years of experience as a cybersecurity officer/engineer or in a related field.

Nice-to-haves

• Bachelor's Degree in Computer Science, Cybersecurity, or a related technical field.

Benefits

• Flexible work hours between virtual and in-person work as per the Authority's telework policy.