Secuirty Analyst II

Monitor, analyze, and respond to cybersecurity threats to protect government IT systems and data, with a focus on vulnerability assessments, incident response, and compliance with standards such as NIST 800-53 and FISMA.

Requirements

• Analyze security events, vulnerabilities, and control effectiveness
• Support incident response, RMF compliance, and continuous monitoring
• Conduct moderately complex investigations and correlate logs across systems
• Perform vulnerability assessments using tools such as Nessus or Qualys
• Utilize SIEM platforms like Splunk or QRadar and endpoint protection tools
• Develop SOPs and runbooks to improve operational efficiency
• Contribute to POA&M tracking and remediation efforts
• Ensure compliance with frameworks such as NIST 800-53, FISMA, and ISO 27001
• Apply strong analytical, problem-solving, and communication skills
• Collaborate with cross-functional teams to enhance security posture
• Support incident response processes and basic forensic analysis
• Work with cloud security tools and platforms such as AWS or Azure (preferred)
• Use scripting languages like Python or PowerShell for automation (preferred)