Analyst‚ Cybersecurity Job Description
Analyst‚ Cybersecurity Duties & Responsibilities
To write an effective analyst‚ cybersecurity job description, begin by listing detailed duties, responsibilities and expectations. We have included analyst‚ cybersecurity job description templates that you can modify and use.
Sample responsibilities for this position include:
Analyst‚ Cybersecurity Qualifications
Qualifications for a job description may include education, certification, and experience.
Licensing or Certifications for Analyst‚ Cybersecurity
List any licenses or certifications required by the position: CISSP, CISA, CCNP, IAT, SANS, II, CISM, CCNA, IAM, GIAC
Education for Analyst‚ Cybersecurity
Typically a job would require a certain level of education.
Employers hiring for the analyst‚ cybersecurity job most commonly would prefer for their future employee to have a relevant degree such as Bachelor's and Collage Degree in Computer Science, Engineering, Technical, Education, Information Technology, Information Security, Information Systems, Business, Information Assurance, Computer Engineering
Skills for Analyst‚ Cybersecurity
Desired skills for analyst‚ cybersecurity include:
Desired experience for analyst‚ cybersecurity includes:
Analyst‚ Cybersecurity Examples
Analyst‚ Cybersecurity Job Description
- Provide monthly reporting to Security management on Threat, Vulnerability, and Incident management metrics
- Analyzing data to discern lessons learned and action items in order to improve security controls and risk posture
- Threat Intelligence – Ensures Cybersecurity processes available both atomic (IOC) and narrative threat intelligence in a documented, consistent, and informed manner
- Conduct ongoing and regular Cyber Security capability assessments and reviews including people, process and technologies
- Knowledge of Information Security Risk Frameworks SAP Business objects/Data warehousing skills
- Existing information security certifications desired, such as CISSP, CCSP, CISM, CISA
- Be responsible for establishing strong working relationships within Information Security (AIS), outside AIS, other brand/affiliate organizations
- Ability to act independently and exercise good judgment the ability to work cross functionally and create virtual teams is essential
- Detect and investigate policy violations, correcting or working with Compliance for further investigation as appropriate
- Provides timely detection, identification, and alerts of possible attacks/intrusions, anomalous activities, and misuse activities, and distinguish these incidents and events from benign activities
- 10 years related experience in DoD/AF Computer-Network Operations (emphasis on Computer Network Defense, Exploitation or Attack), Information Operations, or Information Systems Security Engineering required
- Must exemplify a dedication to achieving the mission of AFOTEC high standards of quality and excellence in performing the duties
- BA or BS degree in Computer Engineering, CS, Science, Mathematics, Engineering, or a related IT field preferred
- Must be able to identify and characterize threats
- Must be able to assess the vulnerability of critical assets to specific threats
- Must be able to determine the risk
Analyst‚ Cybersecurity Job Description
- Perform in-house vulnerability testing, risk analyses and security assessments and oversee remediation, oversee third party vulnerability testing and remediation
- Research the latest information (IT) security trends and recommend appropriate security tools and countermeasures
- Respond to and manage disruptive events within the firm, analyze and investigate to determine if alerts or events warrant incident classification
- Monitor, track and document information security issues and threats to ensure prompt resolution
- Work with the Information Security Manager to assist in overseeing vendor security program
- Develop cyber security reports and assist to defined KPI’s & KRI’s
- Triage and lead escalated Security events and incidents
- Escalation point for the security operation center
- Work independently or among team members to ensure incident procedures address the objectives of the security incident response program
- Assist on intrusion remediation and strategy development and implementation
- Cybersecurity Framework experience a plus
- Monitor the program activities on a regular basis and conduct periodic evaluations according to the program evaluation framework
- Oversee the collection of program metrics for statistical purposes
- Engage managers for appropriate program activities using established practices
- Lead stakeholders by providing direction, input and feedback
- Communicate with stakeholders to gain community support for the program and to solicit input to improve the program
Analyst‚ Cybersecurity Job Description
- Partnership with TCO team
- Remediation work with TCO team
- CCM engagement and oversight
- Outline tool enhancements to transition from program to BAU
- Refine Cimarex's target security profile
- Determine, analyze, and prioritize gaps in current profile
- Create an action plan to resolve profile gaps through creation of security controls
- Identify necessary resources to create and maintain specified security controls
- Analyze business needs and objectives within expected scope of work and tailor solutions accordingly
- Develop security standards and best practices documentation required to support the security program globally
- Thorough understanding of generic Project Life Cycle management controls, experience in Software Development Life Cycle (SDLC) including Agile and have the ability to manage and assign work as part of a team in a matrix environment
- 10+ years of experience in an IT or IA related field and with information assurance and security practices
- 3+ years of experience with Cybersecurity architecture
- Knowledge of the DoD acquisition process and DoD JCIDS requirements process
- Knowledge of information networks and architectures
- Knowledge of the Joint Information Environment (JIE) and the Mission Partner Environment (MPE)
Analyst‚ Cybersecurity Job Description
- Monitors security administration and operations functions for problems in quality of the delivery, operational constraints, or other issues that may negatively impact service quality
- Participates in incident response activities and various cybersecurity initiatives as needed
- The candidate must have strong risk management skills, be able to develop and track to a remediation plan
- The candidate needs to be able to recognize obstacles that may derail progress and take the necessary steps to eliminate those obstacles and/or escalate appropriately
- The candidate must be able to identify what information must be gathered to validate remediation assurance
- This role will work with application, infrastructure and governance teams to develop remediation assurance plans and remediate compliance gaps
- The candidate must have a knowledge of various regulatory audit control requirements (COBIT, COSO, PCI, ISO, FFIEC, & GLBA)
- Provide security expertise as requested and clearly communicate status and concerns to all levels of management
- Identify areas that can be automated and streamlined and develop new processes to make processes more efficient
- Recommends corrective measures based upon actionable intelligence
- A PhD or MS in Electrical Engineering or Computer Science, or a Bachelor degree in Electrical Engineering or Computer Science and five or more years of relevant industrial or academic experience in the Cybersecurity domain
- Must have Cybersecurity experience
- Strong understanding of cyber security concepts
- Strong debate and intelligent negotiating skills
- Able to clearly communicate complex issues to a range of audiences (engineers, executives, vendors, partners)
- Ability to find creative solutions to complex problems
Analyst‚ Cybersecurity Job Description
- Facilitate meetings and reporting of information to management and executives highlighting key metrics based on risk and performance
- Participate in Industry committees to advance Cybersecurity research and development
- Work with functional managers to understand strategic roadmaps and define approach to R&D based on business requirements
- Participate in industry research projects
- Analyze industry R&D results and serve as SME to advise on strategic advancements within Cybersecurity
- Provide input to update strategic roadmaps and Business Technology Plans
- Drive out implementation of POC projects related to Cybersecurity as a result of research and development with industry committees which will include oversight of project teams, milestones and deliverables
- Continuously assess Cybersecurity functions to identify improvement opportunities for people, process and technology
- Drive organizational improvements to processes to simplify functional operations
- Work with other Cybersecurity teams such as Incident Response
- Experience with Microsoft SharePoint and Access
- Must have High School diploma (or equivalent) and 2+ years related experience in Information Systems, Computer Science or a related field
- Candidates must have an active Secret clearance the ability to obtain a Top Secret clearance
- Knowledge of A&A
- Knowledge of IA or INFOSEC concepts and requirements and DoD C&A process and standards
- Knowledge of common networking concepts