Cybersecurity Protect Analyst

Bowhead - Vandalia, OH

Full-time

Vandalia, OH

Transportation Equipment Manufacturing

About the position

Bowhead is seeking experienced Cybersecurity Protect Analysts to join their team in Dayton, OH. The role focuses on ensuring the delivery of critical infrastructure services and involves working alongside Computer Network Defense Analysts and Cybersecurity Engineers in a 24x7x365 cybersecurity service environment. The analysts will perform vulnerability assessments and implement host-based security controls to mitigate the impact of intrusions, contributing to the deployment and maintenance of cybersecurity functions.

Responsibilities

• Identify vulnerabilities and assess DREN assets for compliance with security policies and configurations.
• Conduct monthly vulnerability scans using DoD-approved tools such as ACAS.
• Provide visibility and insight into risks to the DODIN through reports and analyses from vulnerability assessments.
• Perform monthly hardware/software inventory updates using DoD-approved tools such as ACAS.
• Receive and process threat, vulnerability, and attack notifications from various sources.
• Advise subscriber sites on corrective actions to mitigate vulnerabilities or threats.
• Deploy the DoD's Host Based Security System (HBSS) according to DoD policies.
• Operate and maintain the HBSS server in compliance with STIG requirements.
• Ensure proper deployment and updates of HBSS modules on subscriber hosts.
• Configure HBSS for periodic scans as per current DoD guidance.
• Maintain up-to-date malware protection capabilities.
• Create and update functional documentation and standard operating procedures.

Requirements

• Bachelor's Degree in an IT-related discipline.
• 3 to 5 years of relevant experience in cybersecurity.
• CND-SP Baseline Certification (CEH or equivalent).
• IAT II Baseline Certification (Security (+) or equivalent).
• HBSS 301 training for HBSS administration.
• ACAS certification.
• Intermediate to advanced skills in Microsoft Office (Word, Excel, Outlook, PowerPoint).
• Effective communication skills to interpret regulatory guidance and vulnerabilities.
• Strong presentation and public speaking skills.
• Good interpersonal skills and judgment, capable of working independently or in a team.