Cybersecurity Operations Analyst (CSSP)

General Summary:

COLSA Corporation is hiring for a Cyber Operations Analyst. You will be responsible for performing system monitoring and analysis support for the detection of cyber incidents and provide recommendations on how to correct findings.

Principal Duties and Responsibilities (*Essential Functions):

• Monitors the network and supporting systems to detect security compromise events (including intrusions and virus incidents). *

• Provides standard support for processes, investigations and maintenance of system accreditation*

• Identifies where systems/networks deviate from acceptable configurations, enclave policy, or local policy.*

• Provides recommendations for protecting networks, workstations, servers, and IT assets.*

• Involved in conducting audits to ensure information systems security policies and procedures are implemented as defined in security plans and best practices. *

• Supports the formal testing requirements through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.

• Involved in passive evaluations (compliance audits) and/or active evaluations (vulnerability assessments).

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture\_benefits

Required SkillsRequired Experience

Required Qualifications

• Bachelor's degree or higher in a related field (minimum of 3 related certifications may be used in place of related academic field)

• Minimum of 2-4 years of related experience

• Active CompTIA Security+CE certification

• Strong written and verbal communication skills

• Ability to communicate and present information to customers at varying levels of technical detail

• Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities

• Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities

• Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making

• Familiar with encryption technology, penetration, and vulnerability analysis of various security technologies, and information technology security research

• US Citizenship Required; Ability to obtain interim Secret Clearance prior to start date;

Preferred Qualifications

• Active Secret clearance

• CySA+ or CEH certification

• Experience analyzing alerts using PCAPs and/or cloud logs, as well as an understanding of network threats, potential network exploitation, and methods to defend against potential malicious activity

• Proficiency in Office 365 tools at a professional level

• Experience using vulnerability scanning solutions such as Tenable Nessus

• Experience using data presentation/automation tools such as PowerBI or Tableau

• Experience assessing Security Technical Implementation Guide (STIG) findings

• Experience working with Endpoint Security Solutions such as Trellix or Microsoft Defender Endpoint

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.