Minimum Qualifications:
The Entry-Level Cybersecurity Blue Team Analyst supports cybersecurity assessments, defensive cyber operations, vulnerability identification, security monitoring, and incident response activities across enterprise IT environments. The analyst shall be capable of assessing the security posture of common enterprise technologies, including servers, workstations, network infrastructure, cloud environments, databases, applications, identity and access management systems, virtualization platforms, security tools, and enterprise services.
Responsibilities:
- Conduct cybersecurity assessments of enterprise IT systems, applications, networks, and infrastructure to identify vulnerabilities, misconfigurations, security weaknesses, and compliance deficiencies.
- Review system configurations, security controls, logs, alerts, vulnerability reports, and other security-relevant information.
- Support vulnerability assessment and remediation activities, including validation of corrective actions.
- Analyze security events from SIEM, endpoint, network, identity, cloud, and other security-monitoring technologies.
- Assist with security-control assessments and collection of objective evidence.
- Apply established security assessment procedures and cybersecurity frameworks to evaluate system security.
- Document assessment findings, risk observations, recommendations, and remediation activities.
- Develop and maintain assessment documentation, reports, dashboards, and technical artifacts.
- Stay current with emerging threats, vulnerabilities, attack techniques, and defensive cybersecurity practices.
Required Qualifications:
- 1–3 years of experience in cybersecurity, information assurance, system administration, network operations, vulnerability management, or a related field.
- Working knowledge of enterprise IT infrastructure, including Windows and Linux systems, networking, virtualization, cloud computing, databases, applications, and identity services.
- Ability to analyze system configurations, logs, vulnerability data, and security events.
- Ability to use common cybersecurity assessment, vulnerability scanning, SIEM, endpoint security, and network security tools.
- Understanding of the NIST Cybersecurity Framework, NIST SP 800-53, and/or comparable cybersecurity standards.
- DoD 8570 IAT Level II certification required.
- Must hold Top Secret security clearance. Counterintelligence polygraph desired.