Senior Cyber Security Analyst

Full-time - Mid Level

Reston, VA

Telecommunications

About the position

Iridium is seeking a Cyber Security Analyst to join our team for a Space Development Agency (SDA) project! This person will be responsible for discovering vulnerabilities and risks on Information Technology (IT) and Operational Technology (OT) equipment located both locally and remotely at sites in the US and non-US locations. This role will be responsible for ongoing vulnerability scans, monitoring network traffic, and autonomously ensuring hardware and software applications are updated. On the SDA Cyber IT Operations team, as a Cyber Security Analyst, you'll be responsible for ensuring all of the necessary security updates are documented, applied, and reported in a timely manner. You will thrive/succeed in this role if you are able to work independently for specialized Cyber security tasks, and also as a team when new products or solutions are required to be evaluated and proposed to the customer. This position requires an active/current Top Secret/SCI Security Clearance or the ability to obtain a Top Secret/SCI Security Clearance (A U.S. Security Clearance that has been active in the past 24 months is considered active).

Responsibilities

• Work independently to evaluate, implement, and document Security systems for all identified systems
• Lead efforts necessary to receive ATO (Authority to Operate) certification from various government customers
• Play a key role in documenting and applying necessary controls to identified Systems to achieve self-certification required to meet 800-171, 800-172, and 800-53 compliance
• Initiate automation, where possible, to effectively triage and address security alerts
• Serve as an escalation point for security analysts and admins on the Government Special Services team
• Actively identify areas of improvement within processes to ensure response activities align with best practices, minimize gaps in response, and provide comprehensive mitigation of threats
• Engage with Admins and Engineers across various Iridium organizations to respond to and remediate events
• Research, extraction, and dissemination of industry provided intelligence on threat actors targeting the Aerospace and Telecommunications industry
• Respond to service requests and incident tickets within established SLAs
• Maintain existing IT security elements; implement upgrades, replacements and new equipment as directed
• Foster security awareness and ensure security controls are operating effectively
• Maintain operational reports for Key Performance Indicators as well as weekly and monthly metrics
• Maintain proper Change Control and Configuration Management processes
• Maintain all monitoring systems and travel to remote sites to perform scans and gather data not accessible from the home site

Requirements

• Bachelor's degree in an Information Technology or Cyber Security field, or a combination of equivalent education and work experience/certifications
• 8+ years of classified systems experience required
• Network and/or Security certifications (CISSP, CISA, CISM, CRISC, CompTIA)
• Incident Response experience and/or ability to perform forensic analysis
• Demonstrated proficiencies with security infrastructure
• Experience implementing new security technologies
• Excellent communication skills, with the ability to clearly convey products, deliverables, analyses, and/or issues to groups outside of your team or those who are unfamiliar with the topic
• Have confidence and be able to easily build relationships with leadership and colleagues outside of your team
• Possess an analytical mindset, with the ability to understand a situation or problem and think critically to make decisions and come up with out-of-the-box solutions
• Be proactive in providing feedback and be enthusiastic in sharing your knowledge with others
• Capable of prioritizing your own tasks and potentially the tasks of others while making sure deadlines are met

Nice-to-haves

• Direct experience with Government customers in a classified environment
• Cloud-based Security control methodologies in both classified and CUI environments