Cyber Security Analyst Resume Samples

Description :

1. Primary base information assurance manager for all telecommunications and computer security-related functions for the wing of its tenants.
2. Ensuring all unclassified and classified systems and networks are approved to operate prior to initializing operation by obtaining an authority to operate (ATO) from the designated approval authority (DAA).
3. Providing risk-based surveillance of organization information assurance programs to ensure compliance with stings and protection of information.
4. Evaluate, assess and certify hardware, and software products prior to use on any accredited information system or network.
5. Developing standard operating procedures (sops) for network system security operations and incident response.
6. Identify and mitigate is incidents, threats, compromises, and vulnerabilities.
7. Providing consultation and advisement to the communication systems office (CSO) and senior leadership when requested and during incident response.
8. Managed information assurance assessment program (IAAP) to evaluate the health of the wing infosec, COMPUSEC, and COMSEC program.
9. Prepared, modified and reviewed the wing telecommunications monitoring and assessment program (TMAP) report for submittal to the department of the air force.

Experience

10+ Years

Level

Senior

Education

BS

Description :

1. Leading high priority vulnerability assessments from start to finish, responsibilities included configuring Nessus, app detective and burp on production and non-production jump boxes, scanning the clients environment (Windows/Linux servers, databases, and websites), troubleshooting with the client to resolve network and scan related issues, manually analyzing the results to remove false positives before creating and delivering a final report.
2. Analyzing vulnerability scans provided to us by our client to remove false positives from a variety of tools (Nessus, app detective, web inspect and QualysGuard) before creating and delivering a final report.
3. Investigating ArcSight SIEM events to determine any true intrusions. Investigate DDoS attacks, FireEye, Sourcefire, malware, web sense event that are prone to Comcast network and NBCUniversal. Connectors are set for all the IDS/IPS appliance to ArcSight.
4. Raytheon IIS/senior engineer(force point) - sure view insider the cross-platform agent (Linux, Android, and MACOS).
5. Develop scripts in Perl, python, bash, and PowerShell to automate common Splunk tasks such as forwarder deployment, configuration, etc.
6. Work closely with external security organization to constantly monitor security threats and defense.
7. Worked on identifying and developing processes and controls to protect IOT and connected platforms from cyber threats, company-wide.
8. Used gzip with AWS cloud front to forward compressed files to destination node /instances.
9. Assisted with selection and implementation of controls that apply security protections to systems, processes and information resources using the nist family of security controls.
10. Review and assess privacy controls in compliance with the privacy impact assessment (pia) and privacy threshold analysis (pta) using nist 800-53.
11. Experience in AWS cloud platform and its features which includes ec2, VPC, EBS, AMI, cloud watch, VPN servers and microsoft azure.
12. Conduct analysis, cyber threats, the discovery of it vulnerabilities, monitoring for cyber intrusions, troubleshoot and response to security incidents detected from hp arcsight or related SIEM. Ids/IPS, and other security applications.

Experience

0-2 Years

Level

Entry Level

Education

MS

Description :

1. Serving as the cybersecurity analyst on the mitigation squad for the cyber protection team (CPT) within US army cyber protection brigade.
2. Supports us cyber command and central command (Centcom) operations through defensive cyberspace operations (DCO).
3. Protects critical infrastructure and key resources within the department of defense global information grid.
4. Conducts all-source intelligence analysis on adversarial cyberspace capabilities and threats through research and analysis.
5. Provides military intelligence (MI) and cyber protection team leadership with current threat assessments and briefings on a regular basis.
6. Provide computer network analytical support to a wide range of clients in commercial national security environments.
7. Discover networks anomalies and malicious traffic using advanced analytics.
8. Train and mentor approximately 1000 cyber soldiers to increase their proficiency and expertise on analytical platforms.
9. Interacting with 10 plus clients with diverse backgrounds with little to no experience in analysis.
10. Discover evidence of malware, network penetrations, and vulnerabilities within a clients infrastructure and present the data to customers.
11. Evaluating network events and documented impact on current system operations.
12. Developing cyber threat profiles and analyzing open source information.

Experience

7-10 Years

Level

Executive

Education

Associate

Description :

1. Risk management framework (RMF) using NIST 800-37 as a guide, assessments, and continuous monitoring: performed RMF assessment included initiating meetings with various system owners and information system security officers (Isso), providing guidance of evidence needed for security controls, and documenting findings of the assessment.
2. Security documentation: perform updates to system security plans (SSP) using NIST 800-18 as a guide to developing SSP, risk assessments, and incident response plans, create change control procedures, and the draft, review, update plans of action and milestones (POAMS).
3. POAM remediation: performed evaluation of policies, procedures, security scan results, and system settings in order to address controls that were deemed insufficient during certification and accreditation (CA), RMF, continuous monitoring, and Fiscal audits.
4. Expertise in national institute of standards and technology special publication (NIST SP) documentation: performed assessments, POAM remediation, and document creation using NIST sp 800-53 rev. 1 and NIST sp 800-53 rev. 4.
5. Good understanding of security incident and event management (SIEM), automation, and authentication tools, like Splunk for log analysis.
6. Good understanding of information assurance, making sure data at all time is secured, has integrity and is available to those that need it.
7. Have experience in email security making sure that email gets to it destination without losing its integrity.
8. Strong time management skills and ability to prioritize multiple work streams.
9. Ability to work on cross-functional teams with various stakeholders on assignments under tight deadlines.
10. Ability to understand and translate complex technical issues into business implications for technical and business representative.
11. Maintains ongoing awareness of current and emerging information regarding security threats, techniques, and landscape.
12. Have worked with a computer emergency response team (CERT) for remediation.

Experience

5-7 Years

Level

Executive

Education

BA

Description :

1. Aid in development of system security plan (SSP), aa packages, national institute of standard and technology (NIST) documents, federal information processing standards (FIPS), security assessment report (SAR), risk management framework (RMF), along with other security documents on quarterly compliance basic.
2. Working knowledge of NIST SP 800-18, sp 800-30, sp 800-34, sp 800-37, sp 800-39, sp 800-53a, sp 800-53 rev 4, sp 800-53a, sp 800-60, sp 800-65, sp 800-118, sp 800-137.
3. Put into a disaster recovery situation, whereby I had to assess the situation and organization vulnerabilities in order to ensure our SSPS was functioning the way we intended. If any of our plans failed worked with the Isso to maintain and develop a plan of action and milestone (POAM) and remediation plan for failed systems.
4. Evaluate the security control assessment of the technical, management, and operational controls for the operating information systems. To guarantee the controls are implemented correctly and producing the desired outcome.
5. Ensure that all IT systems are operating, using, maintaining and disposing of in accordance with internal security policies and procedures.
6. Work with Nessus tool, Splunk, CSAM tool, Nmap, Wireshark, GRS, GRS2, TAFF.
7. Responsible for developing, communicating, and maintaining a consolidated list of RMF activities and deliverable calendars.
8. Familiar with Diacap, which ensured that our organization applied to risk management to information systems and iso 27001.
9. Strong analytical communication and interpersonal skills. Able to communicate effectively with senior level.
10. Perform security assessment for multiple cloud service providers in accordance with the feed ramp.
11. Draft, finalize and submit privacy threshold assessments (PTA), privacy impact analyses, e-authentication assessments, and system of record notice.
12. Recommend and use tools for security scanning and testing, including network, operations, and coding.

Experience

2-5 Years

Level

Junior

Education

BS

Description :

1. Reviewing IDS/IPS events and identify anomalous activities or potential network security risks.
2. Monitoring and investigate suspicious network activities utilizing a variety of tools such as ArcSight, Splunk, Carbon black/bit9, FireEye.
3. Analyzing network traffic and various log data to determine the threat/impact on the network.
4. Evaluating and performing incident escalation in accordance with incident response procedures.
5. Performing incident handling and documentation within the incident response lifecycle (detection, triage, analysis, mitigation, reporting, and documentation).
6. Utilizing threat intelligence tools to support the daily cyber security operations, and produce intel analysis of threat actors, IOCS, and vulnerabilities.
7. Attending classified briefings in order to facilitate the sharing of information and increased awareness of cyber threats.
8. Utilizing analytical skills and tools to process and refine information into intelligence.

Experience

5-7 Years

Level

Executive

Education

MBA

Description :

1. Conducting the vulnerability assessment (Nessus/ Microsoft baseline system analyzer), including user accounts, patch.
2. Management, routine audits, network permissions, and security policies.
3. Configures, manages, and ensures the continuous monitoring of network defense systems such as firewalls, route.
4. Intrusion detection/prevention systems, web application firewall to block unwanted traffic.
5. Guarantees that the company's software, devices, and data are sanitized, archived or decommissioned in compliance with the company's policy.
6. Ensures layers 2/ 3 security of the network (802. 1x, port security, access control list, BPDU guard, DHCP snooping.
7. Ensures that OS, software, devices, and applications are thoroughly tested and configured according to technical security.
8. Implements system backup/recovery procedures and incidence response to minimize losses in case of outages/breaches.
9. Manages critical support functions such as installation, configuration, troubleshooting, and patching of hardware (routers, switches, firewalls, printers, desktops, laptops, handheld devices, and point of sales), software (Microsoft Office Applications and more), Windows operating systems (7, 8, and 10), and others (Linux centos) to meet the security baseline.
10. Utilizes a ticketing system (BMC remedy) to handle incident management.

Experience

5-7 Years

Level

Executive

Education

BS

Description :

1. Interviewing system administrators and other stakeholders to assist in generation custom reports and/or artifacts in support of the AA process.
2. Identifying security controls and construct a compliance matrix for tracking.
3. Apply appropriate information security control for federal information system based on NIST 800-37, evaluate threats and vulnerabilities based on tenable reports.
4. Working directly with Isso in the review of packages such as system security plan (SSP) to ensure the ssp is updated based upon findings in the requirement traceability matrix (RTM), and spearhead team of information security professionals responsible for the development of security policies, procedures, and security assessment and authorization (aa) packages for various commercial and government entities.
5. Providing security support to information system security officers (Isso) and point of contact on the FISMA and Nist process.
6. Initiate security assessment and authorization environments such as system security categorization, development of security and contingency plans, security testing and evaluation, system accreditation and continuous monitoring.
7. Reviewing privacy threshold analysis (PTA) privacy impact assessment (PIA), and a system of record notice.
8. Preparing comprehensive and executive assessment authorization (AA) packages for approval of an.
9. Ensuring customers adhere strictly to security policies and procedures following NIST 800-53 NIST 800-53a.
10. Reviewing artifacts and removed any PII (personally identifiable information) for audit requests. Perform vulnerability scanning and analysis with Nessus.
11. Directly manage and escalate outstanding remediation items to ensure timely completion.

Experience

5-7 Years

Level

Executive

Education

MS

Description :

1. Configured Qualys guard tool for vulnerability analysis of devices and applications. Monitoring them constantly through the dashboard by running the reports all the time.
2. Responsible for policy compliance and vulnerability scans in qualysguard and nessus.
3. Maintaining network performance by performing network monitoring and analysis, and performance tuning, troubleshooting network problems. Skilled using burp suite, Nmap, QualysGuard, Nessus.
4. Implementing essential changes to enhance reporting, communications, and work flow related to vm and patching teams.
5. Providing approvals for software/application installations, site review for web access, mcafee epo exceptions, and vulnerability exceptions.
6. Writing complex tasks such as etl jobs to integrate rsa archer with nessus, rapid 7 and qualys vulnerability scanners.
7. Plan approval and implementation - proof of concept, change management.
8. Providing leadership in architecting and implementing security solutions towards qualys and siem tools like splunk.
9. Providing leadership in architecting and implementing security solutions towards siem tools like splunk.
10. Splunk engineer/dashboard developer responsible for the end-to-end event monitoring infrastructure of business-aligned applications.

Experience

2-5 Years

Level

Junior

Education

BA

Description :

1. Conduct the STE kick-off meeting and populate the requirements traceability matrix (RTM) according to NIST SP 800-53a.
2. Experience with NIST standard on cybersecurity and incident handling (800-63, 800-61).
3. Performing risk assessment using the NIST 800-30 task to determine the level of criticality and sensitivity of the information system.
4. Supporting the client in conducting security control assessment (SCA) as part of the continuous monitoring of security controls.
5. Creating findings for security controls as part of pre-OIG audit preparation.
6. Categorizing information systems with reference to guidelines from fips 199 and NIST sp 800-60.
7. Assisting client in closing findings for POAM that has past scheduled completion dates (SCD).
8. Support client in drafting mitigation strategies from systems vulnerability assessment report (VAR).
9. Conducted meetings with IT team to gather documentation and evidence (kick-off meeting) about their control environment.
10. Worked with business process owners to ensure timely identification and remediation of jointly owned risk-related issues and action plans (POAM).
11. Conducted meetings with the IT team to gather documentation and evidence about their control environment.

Experience

2-5 Years

Level

Junior

Education

BS