Job details
Job type full-time
Full job description
Company description
Mindpoint group delivers industry-leading cybersecurity solutions, services, and productsWe are trusted cybersecurity advisors to key government and commercial decision-makers and support security operations for some of the most security-conscious organizations globally.
Our relationship with you is for the long run because your success is our successWe invest in your success through fantastic benefits (healthcare, generous pto, paid parental leave, and tuition reimbursement, to name a few).
Beyond just excellent pay and benefits, you’ll want to work here for reasons that can’t be written into an offer letter—the challenge, growth opportunities, and most important: the culture of a company that cares about you.
A position at mpg promises you
A diverse organization
A safe workplace with zero tolerance for discrimination or harassment of any kind
A balanced work lifeSeriously.
A stable, established, and growing business
A leadership team focused on your professional growth and development
Job description
This position is contingent upon contract awardMindpoint group is seeking a security analyst who will be responsible for supporting the cybersecurity program through monitoring, analysis, and resolution of various continuous monitoring capabilities to include but not limited to vulnerability management, endpoint detection and response (edr) tool, security information event management (siem), and additional threat monitoring agentsThe analyst will support an enterprise program engaging with stakeholders to drive the security program for an exciting mission.
Cybersecurity work related to operating systems, application, logging and monitoring, nist/fisma compliance, remediation, and patch management
Monitor system configuration to ensure that the systems are operating effectively
Resolve any issues and problems, following documented procedures and playbooks
Responsible for the implementation of security policies, controls, and the technologies that support the enterprise (e.g., malware, anti-virus, remote access)
Investigate potential anomalous behavior and intrusion attempts
Leverage aggregated cyber logs, network flow, and anomaly data for analysis, research and the identification of potential compromise within infrastructure or applications
Perform root cause analysis to identify gaps and provide technical and procedural recommendations that will reduce the exposure to cyber risks
Support the development and maintenance of documented playbook procedures
Perform application updates, patches to the scoped components for the tools (e.g., the application layer components)
Properly track and account for configuration items identified in accordance with the configuration management plan, including both standard and enterprise-wide change management procedures
Perform and distribute vulnerability scans to appropriate information system personnel assigned the role of application, infrastructure or database administratorThis includes application, code or operating system scans
Track and resolve findings at the assigned level of criticality in accordance with requirements set in the vulnerability management plan and nist guidance on minimum security controls
Qualifications
Top secret clearance (sci eligible) strongly preferred but will consider exceptional candidates who are public trust eligible
Minimum of four years as a security/network administrator or equivalent knowledge
Bachelor`s degree in a technical field from an accredited college/university or equivalent experience (computer science preferred)
Understanding and experience with csam
Experience with security tools such as vulnerability management tools (nessus, retina), configuration management (bigfix, sccm, epo), endpoint detection (antivirus, atp), data loss prevention, and intrusion detection software and hardware
Familiar with the use of data analysis tools (excel or powerbi)
Familiar with multi-tiered network applications, common ports, and protocols used in those communications, the common vulnerability system (cvs), and the exploitation mechanisms of common vulnerability types (e.g., buffer overflows, cross-site scripting, sql injection)
Ability to perform online research and comprehend attack signatures while comparing them to network traffic to perform a proper analysis of detections
Ability to use common tools such as wireshark to examine network traffic
Familiarity with protocols commonly used in commercial networks, such as server message block (smb), remote procedure calls (rpc), hypertext transfer protocol (http), and structured query language (sql)
Ability to perform splunk queries to examine and query log data from the enterprise logging as a service system
Work environment
While this position is fully remote, preference will be given to candidates who reside in the washington, dc areaFor candidates outside of the washington, dc area, travel up to 10% to washington, dc area will be required post covid.
Additional information
All your information will be kept confidential according to eeo guidelines.
Equal opportunity employer veterans/disabled
