Gridiron is seeking a Threat Analyst for a Federal Program on a remote basis. Ability to obtain security clearance As a remote Threat Analyst, you will monitor and support security operations for malicious activity. You will perform CERT/SOC operations to include incident monitoring, response and reporting. To be successful in this role you should be familiar with: * Common Intrusion Detection Systems
* Virus and malware behavior
* Intrusion response methodologies
* Responsible for determining appropriate response action(s) to an incident, following the agency standard techniques, tactics and procedures.
* Responsible for the analysis and reporting of cyber threats as well as assist in deterring, identifying, monitoring, investigating and analyzing computer network intrusions. In this role, you will: * Support cyber and network incidents and warning activity
* Perform security event and incident correlation using information gathered from a variety of sources within the enterprise
* Perform cyber incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations which enable expeditious remediation
* Track cyber actions from initial detection through final resolution
* Analyze and assesses damage to the data / infrastructure
* Perform cyber engineering trend analysis and reporting
* Communicate with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations Required Education and Experience: * A Bachelor's Degree in a related discipline is preferred, however, equivalent years of hands on analysis and reporting experience may be considered in lieu of educational requirements * 1-year hands-on experience in the detection, response, mitigation, and/or reporting of cyber threats affecting client networks and one or more of the following: Computer network surveillance/monitoring * Experience working within a Cybersecurity Operations Center environment * Experience with COTS technologies used in a Cybersecurity Engineering environment * CNDSP-A (GCIA, GCIH, or CEH) or CNDSP-IR (GCIH, CSIH, or CEH) certification required * IAT Level II (GSEC, Security , SSCP, or CCNA-Security) certification required * Knowledge and understanding of network protocols, network devices, multiple operating systems, and secure architectures * Experience in computer evidence seizure, computer forensic analysis, and data recovery, and/or Computer network forensics * Experience in computer intrusion analysis and incident response, Intrusion detection * Applicants must be able to work in a team environment * Ability to handle stress and work well under pressure * Ability to use PC, MS Office, Analytical and Critical Thinking Skills * Interpersonal and People Skills with Multi-Tasking Clearance Requirements • Candidate is required to be a US citizen (non-dual citizenship) with the ability to obtain DHS Suitability