Cyber Security Analyst III - Digital Forensics and Incident Response

OSC Technical Solutions is seeking a Cyber Security Analyst III to support the cybersecurity program at the U.S. Department of Energy Hanford Site. The role conducts digital forensic investigations, monitors and responds to enterprise security events, supports incident remediation and reporting, maintains security tools, and mentors junior analysts.

Responsibilities:

• Utilize digital forensics tools to conduct forensic investigations on target endpoints
• Utilize a range of security tools (e.g., SIEM, NIDS, SOAR, Endpoint Protection, Firewalls, DLP, Email Filtering, Scanners, PCAP) to monitor, analyze, and respond to security events on the network
• Follow established procedures to identify reportable security incidents; act as an incident handler by gathering data and artifacts, performing analysis, writing incident reports, reporting to management, and carrying out mitigating actions to contain and recover from cyber-attacks
• Monitor and respond to reports and threat intelligence from various sources
• Distribute threat advisories, vulnerability reports, and official directives to customers and leadership
• Participate in disaster recovery exercises and events
• Support operation and maintenance of security tools
• Support cyber security audits, assessments, data calls, and investigations
• Manage projects and processes independently with limited supervision
• Coach and review the work of lower-level professionals
• Serve as a technical mentor and trainer for junior analysts
• Perform other duties as appropriate and as assigned

Requirements:

• • Working knowledge of a cyber security compliance framework, such as the National Institute of Standards and Technology (NIST), Center for Internet Security (CIS) Critical Security Controls, or ISO 27001/27002
• • Ability to set and manage priorities judiciously
• • Excellent written and verbal communication and interpersonal skills
• • Ability to work cooperatively in a team environment
• • Strong customer service orientation
• • Sufficient fine motor skills for the use of computers, calculators with an ability to withstand repetitive keyboarding for extended periods of time
• • Visual and communications ability adequate to perform the essential functions of the job
• • Ability to kneel, bend and twist at the waist on an occasional basis
• • Ability to reach below shoulder height with regular frequency (desk position) and at or above shoulder height on occasion
• • Ability to push, pull, carry and lift objects weighing up to 10 pounds on a regular basis, and greater weights on an occasional basis
• • Ability to travel by vehicle or aircraft, and ability to safely operate a motor vehicle
• • Bachelor's Degree and 5 or more years of experience, or an equivalent combination of education, training and experience
• • Must be able to obtain and maintain a Department of Energy access authorization (HSPD-12 PIV credential); this requires a successful federal background investigation
• • All applicants must be able to comply with all federal regulations, including those concerning controlled substances, as a condition of employment
• • Bachelor's Degree in Cyber Security, Computer Science or related field
• • Experience in cyber security, information technology, systems analysis, or a similar role, including hands-on incident response or digital forensics experience
• • Certifications such as GCFA, GCIH, GNFA, CySA+, or CEH
• • Experience with industrial control system (ICS) / operational technology (OT) security or other federal FISMA-regulated environments