Cybersecurity Analyst III (Purple)

Washington Metropolitan Area Transit Authority

Full-time - Mid Level

Transit and Ground Passenger Transportation

About the position

The Cybersecurity Analyst III (Purple) at the Washington Metropolitan Area Transit Authority (WMATA) plays a crucial role in enhancing the cybersecurity posture of the organization. This position involves engaging in various purple team activities, including penetration testing, threat analysis, and incident response, to protect critical transit infrastructure. The analyst will collaborate with multiple teams to identify vulnerabilities, develop defensive strategies, and communicate findings to both technical and executive audiences.

Responsibilities

• Support purple team engagements including network penetration testing, web and mobile application testing, and threat analysis.
• Develop comprehensive reports and presentations for technical and executive audiences.
• Communicate findings and strategies to the Program Lead and technical staff.
• Facilitate recommendations to correct identified vulnerabilities.
• Utilize attacker tools and techniques in IT, OT, SCADA, and sensitive environments.
• Engage in simulations to defend against imminent threats.
• Analyze threat information from multiple sources and synthesize intelligence.
• Coordinate and perform the collection, processing, analysis, and dissemination of cyber threat assessments.
• Generate routine and urgent reports to support enhanced security procedures.
• Investigate and analyze incident response activities to ensure real-time cyber defense handling.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field.
• Four years of experience as a cybersecurity officer/engineer or in a related role.
• Expertise in NIST standards and cybersecurity frameworks.
• Experience with data analytics and threat intelligence.

Nice-to-haves

• Experience with IDS/IPS/HIDS/HIPS evasion techniques.
• Familiarity with SCADA systems and their security requirements.
• Knowledge of social engineering testing techniques.

Benefits

• Hybrid work opportunity allowing flexibility between virtual and in-person work.
• Medical examination for the position, if required.