Public Trust Security Analyst

Job Summary

Supporting cybersecurity operations in a federal environment, the full-time Public Trust Security Analyst will perform hands-on detection, analysis, investigation, threat hunting, and incident response activities while enhancing the organization's security posture remotely.

Key responsibilities

• Monitor and analyze security events utilizing Splunk Enterprise Security (ES) and conduct incident response activities from detection through closure
• Investigate endpoint security incidents using Microsoft Defender for Endpoint and assess AWS cloud security telemetry with GuardDuty and Security Hub
• Collaborate with Security Operations teams and federal stakeholders while preparing reports and communicating findings to various audiences

Required qualifications

• Three to five years of experience in cybersecurity operations, SOC analysis, or incident response
• Hands-on experience with Splunk Enterprise Security, including search development and dashboard creation
• Experience utilizing Microsoft Defender for Endpoint for security investigations and policy management
• Working knowledge of AWS cloud security technologies such as GuardDuty and Security Hub
• Familiarity with incident response methodologies and the MITRE ATT&CK framework