Job Description

WarCollar Industries is looking for a Cloud Cyber Security Analyst to work with our customer on a contract supporting national security.

The Cloud Cyber Security Analyst shall:

• Perform cyber analysis and response, detection engineering, and automation for commercial cloud environments
• Develop metrics and reporting to inform the customer of identified risks to their environment.
• Create and modify SIEM dashboards to clearly identify scope of findings or monitor activity.
• Identify patterns/outliers within data sets that match threat actor TTPs, post compromise behavior, and otherwise unusual activity, such as insider threat.
• Conduct dynamic and static malware analysis on samples obtained during incident handling or hunt operations to identify IOCs.
• Track investigations to resolution and provide an after-action report as required.
• Identify misuse, malware, or unauthorized activity on monitored networks
• Analyze all relevant cyber security event data and other data sources for attack indicators and potential security breaches
• Assist in coordination during incidents
• Identify intrusions utilizing various detection and prevention systems and other security event
• data sources on 24x7x365 basis
• Analyze intrusion related data to determine root cause and identify follow on activity while coordinating with Incident Handlers, Hunters, and various partners
• Correlate data from intrusion detection and prevention systems with data from other sources such as firewall, web server, and DNS logs, to include NetFlow, metadata, and pcap analysis
• Contributes in tuning and filtering of events and information, creating custom views and content using all available tools
• Review assembled data with firewall administrators, engineering, system administrators and other appropriate groups to determine the risk of a given event
• Contribute to the development of playbooks and procedures for handling each security event detected.
• Development of playbooks and procedures for handling each security event detected.

Required Skills

• Minimum of 5 years of progressively responsible experience in Cyber Security, InfoSec, Security Engineering, Network Engineering with emphasis in cyber security issues and operations, computer incident response, systems architecture, data management.

Candidates must be United States citizens, hold an active Top Secret clearance with Sensitive Compartmented Information (TS/SCI), and have a positively adjudicated polygraph to be considered for this position.

Education:

Bachelor's of Science in Electrical Engineering/Computer Science or equivalent training or 4 additional years of experience in lieu of degree

Desired Skills

Familiarity with the following classes of enterprise cyber defense technologies:

• Security Information and Event Management (SIEM) systems to include Splunk ES, Elk, Sentinel, Chronicle
• Sysmon
• Azure
• AWS
• GCP
• Network Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS)
• Host Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS)
• Network and Host malware detection and prevention
• Network and Host forensic applications
• Web/Email gateway security technologies
• Log aggregation tools

About WarCollar Industries

COVID-19 Vaccination Policy:

Prospective and/or new employees will be required to adhere to the customer’s vaccination policy.

About us:

WarCollar Industries, LLC is a veteran-owned small business. We maintain a team of cybersecurity experts committed to protecting complicated data and distribution systems and providing decision makers with the most accurate assessment of residual risk possible. We work with our clients to solve the toughest challenges in the ever-evolving digital landscape. Services include network defense, computer network attack, secure network design, penetration testing and vulnerability assessment. WarCollar enables its clients to find, fix, stop, and ultimately solve cybersecurity problems across their entire enterprise.

WarCollar offers generous benefits including: Medical insurance premium coverage; PTO based on billable hours; federal holidays plus your birthday; matching 401k, education reimbursement plus paid training days; performance bonuses; referral bonuses; government shutdown protection; monthly team building events plus two major social events annually.

WarCollar Industries, LLC is an equal opportunity employer. WarCollar does not discriminate in employment based upon race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, status as a protected military veteran, or other non-merit factor.