Information System Security Analyst

This position requires shift work including nights/weekendsResponsibilities include:Responsible for leading incident response efforts and reporting status to stakeholders and leadership.Maintain an understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security operationsProduce reports and briefs to provide an accurate depiction of the current threat landscape and associated risk.Investigate cyber activity targeting customer information and its infrastructureProviding mentorship and technical education to CIRT personnelLiaison with other government cyber threat analysis entities, such as inter-agency Cyber Threat Working GroupsAnalyze and report cyber threats as well as assist in deterring, identifying, monitoring, investigating and analyzing computer network intrusionsMeet and maintain customer required Information Assurance training complianceMANDATORY SKILLS: 6+ years of directly relevant experienceCurrent experience with AWS security solutions and cloud security investigationsCurrent incident response experience using SplunkPrevious experience with penetration testing (red/blue/purple teams)Previous security investigation experience (OS Forensics, Network Forensics, Web Application Forensics, Cloud Forensics, etc.)Experience as a Linux/Windows/Network administratorMust be able to work collaboratively across agencies and physical locationsExcellent oral and verbal communicationMust be a U.S. CitizenMust have active/current Top-Secret clearance with the ability to obtain a TS/SCI.Must be able to receive DHS suitability prior to starting employment.OPTIONAL SKILLS: Desired Skills:Hands-on experience in the detection, response, mitigation, and/or reporting of cyber threats affecting client networksExperience in computer intrusion analysis and incident responseExperience with computer network surveillance/monitoringKnowledge and understanding of network protocols, network devices, multiple operating systems, and secure architecturesFamiliarity with computer evidence seizure, computer forensic analysis, and data recoveryExperience with System log analysisCurrent experience with network intrusion detection and response operations (Protect, Defend, Respond and Sustain methodology)Current experience with cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networksCurrent experience with AWS security solutions and cloud security investigationsDesired Certifications:SANS GCIH or equivalent certificationSANS GCFA, GCFR, or equivalent certifications)Splunk Power User or higherAWS Certified Practitioner or higherCertified Information Systems Security Professional (CISSP)Cisco Certified Network Professional (CCNP), Cisco Certified Security Professional (CCSP) or similar certification required.

• A Supportive and Equitable Working Environment that is both Stimulating and Challenging
• Competitive Hourly Salary
• Unique Employee Success Sharing Program that allows ATP employees to Share in Company's Successes
• Automatic Approved Overtime (as long as contract permits)
• Retirement Pay (401K); 100% company paid, immediately vested with Profit-Sharing Component
• Company Medical Coverage Plans - HMO, Open Access, PPO plans
• Company Dental Plan - widely accepted, comprehensive, and flexible
• Progressive Overtime Policy
• Flexible Spending Account benefit
• Lucrative Referral Bonus Policy
• Holiday Scheduling that Coincides with Government Holidays
• Robust Professional Expenses & Training Program
• Computer Allowance
• Internet Allowance
• Short and Long Term Disability
• Life Insurance