Public Trust Cybersecurity Analyst

Job Summary

Supporting cybersecurity operations in a federal environment, the full-time Public Trust Cybersecurity Analyst will perform detection, analysis, investigation, threat hunting, and incident response activities while helping to strengthen the organization's security posture remotely.

Key responsibilities:

• Monitor and analyze security events using Splunk Enterprise Security (ES) and conduct incident response activities from detection through closure
• Investigate endpoint security incidents utilizing Microsoft Defender for Endpoint and assess AWS cloud security telemetry with GuardDuty and Security Hub
• Collaborate with Security Operations teams and federal stakeholders while preparing reports and communicating findings to various audiences

Required qualifications:

• Three to five years of experience in cybersecurity operations, SOC analysis, or incident response
• Hands-on experience with Splunk Enterprise Security, including search development and correlation rule tuning
• Experience with Microsoft Defender for Endpoint and AWS cloud security technologies
• Familiarity with the MITRE ATT&CK framework and incident response methodologies such as NIST 800-61
• Proven ability to manage incidents through the complete incident response lifecycle