H2 Performance Consulting
Cyber Security Operations Analyst
H2 Performance ConsultingUnited States1 day ago
Full-timeInformation Technology
H2 Performance Consulting is an Equal Opportunity/Affirmative Action Employer and strives to build a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. As a Federal Contractor, H2 Performance Consulting is required under Executive order 12989, to verify employment eligibility of selected candidates through the Department of Labor's - E-Verify.

H2 is seeking a Cybersecurity Operations Analyst to support the Navy Enterprise Business Solutions program office. The Operations Analyst will use Splunk Enterprise Security in a large enterprise environment, write Splunk scripts for events filtering and analysis, and work with operating system administrators in support of alert/incident response for a major SAP/ERP system.

The Cyber Security Operations Analyst responsibilities include:

  • Will use Splunk Enterprise Security in a large enterprise environment and write Splunk scripts for events filtering and analysis
  • Work with operating system administrators in support of Alert/Incident response
  • Identify communications paths as it relates to alert/incident investigations
  • Understand TCP/IP (IPv4, IPv6) along with related protocols and technologies (HTTP, FTP, SSH, NFS, DNS, NTP, FTP, DHCP, SMTP, SSL, etc.)
  • Requires understanding of routing protocols, proxies, and firewalls
  • Will maintain documentation of processes, procedures and configurations related to maintaining applications
  • Requires knowledge of forensics, network analysis, log analysis, systems hardening, encryption technologies, certificates, mobile, and web application security
  • Assist in proactively developing security best practices procedures and processes within the security operations team
  • Will write situational analyses for high-risk threats and suggests appropriate courses of action for remediation
  • Will document all activities during an incident/investigation and provides leadership with status updates during the life cycle of the incident/investigation
  • Requires theoretical knowledge of information systems security standards and practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling)
  • The ideal candidate will have the knowledge, skills and abilities required to write scripts (bash, shell, perl, python, etc...) and write regular expressions
  • The ideal candidate will knowledge of Operating System audit events to include Windows and Linux
  • The ideal candidate will knowledge of Database audit events to include Oracle, MS SQL, Sybase, and HANA
  • The ideal candidate will have hands-on IT experience to include server build, ldap, and an understanding of Encryption Algorithms and PKI authentication implementation

Education, Knowledge and Skills Required:

  • The candidate must have an active SECRET security clearance and ability to gain a favorably adjudicated T5 background investigation
  • The candidate must have a bachelor's degree in Software Engineering or related field
  • The candidate must be certified to meet IAT Level 1 CSWF requirements (i.e.: Isc2's CISSP)
  • The ideal candidate will have 3 to 5 years of experience
  • Working in a cybersecurity operations environment maintaining the security of enterprise level systems
  • Working as a Systems/Network Administrator
  • As a User or Administrator of a Splunk Enterprise Security (ES) implementation
  • In a Security Operations Center (SOC) environment
  • The ideal candidate will have completed the Splunk Enterprise Security User and/or Splunk Enterprise Security Administrator courses
  • The candidate must have familiarity with SIEM tools, monitoring tools and automated security assessment tools
  • Experience with Agile and/or DEVSECOPS a plus
  • SAP and/or ERP experience a plus
  • Must be capable of performing effectively individually and as part of a team
  • Must have effective critical thinking and problem-solving skills
  • Must have strong oral and written communication skills
  • Must be proficient in Microsoft applications such as Word, Excel, PowerPoint, and Outlook
  • Must be able to manage time and be on time to meetings

Qualified candidates may submit their resume to the career section of our company website at https://h2pc.com/employment-opportunities/. All resumes will be reviewed and those candidates we wish to further in the application process will be contacted via email/phone to schedule initial phone screens. All resumes are kept on file for comparison of skills against future position requirements.

Key Skills

Ranked by relevance
Apply