Job Description
We are seeking a skilled Cyber Threat Analyst to support the judiciary’s Technology Security Operations (TSO). The selected candidate will be responsible for planning, developing, and implementing enterprise information security solutions that address both current and emerging security challenges. This role requires expertise in enterprise-scale security problem-solving, security product analysis, and risk management.
Job Responsibilities
- Security Monitoring: Continuously monitor networks, systems, and applications for signs of security breaches using security tools (e.g., SIEM, IDS/IPS, firewalls, EDR, etc).
- Threat Detection: Analyze security alerts, log data, and network traffic to identify potential threats or vulnerabilities.
- Incident Response: Assist in responding to security incidents by investigating alerts, containing threats, and documenting findings.
- Vulnerability Management: Conduct regular vulnerability assessments and report on the risks and weaknesses in systems and applications.
- Security Audits: Participate in internal and external security audits to assess compliance with security policies and industry regulations.
- Security Reporting: Generate reports on security incidents, vulnerabilities, and key security metrics to share with the security team and management.
- Access Control Review: Review and recommend adjustments to access controls to ensure users have appropriate access to systems and data.
- Policy and Procedure Adherence: Ensure adherence to organizational security policies and procedures, providing input for updates and improvements when necessary.
- Collaboration with IT Teams: Work closely with IT and development teams to identify and resolve security issues, including patch management and secure configuration.
- Threat Intelligence: Stay informed about emerging security threats and vulnerabilities and share relevant threat intelligence with the security team.
Required Skills/Qualifications
- 3+ years of experience in compliance analysis, information security, or related fields.
- Strong understanding of federal security frameworks (e.g., NIST, FedRAMP, FISMA, ISO 27001, CIS controls).
- Experience in governance, risk, and compliance (GRC) tools and methodologies.
- Familiarity with security technologies such as SIEM, endpoint protection, access control, and vulnerability management.
- Strong analytical and problem-solving skills with attention to detail.
- Excellent written and verbal communication skills, with the ability to create policy documentation and reports.
- Ability to work independently and collaboratively with cross-functional teams.
Preferred Experience
• Certifications such as CISSP, CISM, CEH, Security+, or GIAC.
• Experience with cloud security and compliance (AWS, Azure, or Google Cloud).
• Familiarity with federal judiciary security policies and risk management frameworks.
Education
- Bachelor’s degree in information security, Computer Science, risk management, or a related field.
- Years of experience can be considered in lieu of degree
All your information will be kept confidential according to EEO guidelines.