Cybersecurity Analyst

BDR Solutions LLC seeks a Cybersecurity Analyst to support the security program by monitoring, investigating, assessing, and improving the security environment using modern tools and controls.

Responsibilities

• Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection.
• Investigate and respond to security incidents to support timely containment and remediation.
• Perform vulnerability assessments and recommend mitigation strategies.
• Create daily, weekly, monthly, and/or quarterly vulnerability reports tracking critical, high, medium, and low findings with actionable detail (including examples of trends such as increases, remediations, percent changes, affected platforms, and vulnerability categories).
• Maintain and update security documentation, including incident reports and playbooks.
• Collaborate with IT teams to implement security controls and best practices.
• Conduct threat intelligence research to identify emerging risks and attack vectors.
• Support compliance efforts using relevant frameworks, including NIST and ISO 27001.
• Assist with security awareness training for employees.
• Participate in regular security audits and risk assessments.
• Provide recommendations to improve overall security posture.
• Coordinate with engineering, operations, development, and customers to maintain practices aligned to defined information security policies and standards.
• Conduct continuous assessment of current technology architecture for vulnerabilities, weaknesses, and other risks.
• Support internal and third-party security audits.
• Coordinate and report on technical aspects of incident management processes and operational components, including detection and measurement.
• Manage day-to-day threat and vulnerability management, identify risk tolerances, recommend treatment plans, and communicate residual risk.
• Ensure audit trails, system logs, and cybersecurity monitoring data sources are configured per cybersecurity policy and available to necessary parties for review and compliance.
• Support security-testing procedures to verify security of systems, networks, and applications and assist remediation of identified vulnerabilities.
• Liaise among internal teams and external vendors to ensure compliance and a strong security posture.
• Consult with IT staff so security is included in evaluation, selection, installation, and configuration of hardware, applications, and software.
• Recommend and coordinate implementation of technical controls to enforce defined security policies.
• Implement and maintain Splunk / Tenable platform infrastructure and configuration, plus support day-to-day operational and user needs.
• Customize Splunk queries and support service help desk requests related to the Splunk / Tenable platforms.
• Perform advanced searching, forensics, and analytics using security tools to support cybersecurity tasks.

Requirements

• U.S. citizenship required; select applicants will be subject to a government security investigation to meet eligibility for access to classified information and obtain a government-granted security clearance.
• Eligible for DOD Top Secret clearance with SCI.
• One or more Information Security Certifications: Security+, CEH, CISSP, CISA, CISM, CBCP, or GIAC.
• Bachelor’s in Cybersecurity or similar field.
• Minimum 3 years of IT experience, including: 3 years in an information security role and 3 years with Splunk Enterprise.
• Strong understanding of the business impact of security tools, technologies, and policies.
• Analytical and high-level problem-solving skills for complex information security issues.
• Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint, Outlook) for documentation, reporting, and presentations.
• Excel: pivot tables, formulas, data analysis, and data visualization for reporting.
• Word: professional documentation and formatting.
• PowerPoint: creating clear and engaging presentations.
• Outlook: email and calendar management.
• Ability to complete responsibilities timely, professionally, and with quality.
• Collaborative team player; able to communicate clearly to both technical and non-technical audiences for a globally dispersed team.
• Ability to translate goals into action, follow through, take initiative, and seek opportunities to improve performance.
• You do not need to possess 100% of the listed qualities to be considered.
• Available to work onsite as required by the job.
• Employment is contingent upon contract award (not guaranteed; proceeds only if the contract is awarded and funded).

Technologies

• Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook
• Microsoft Office Suite
• Splunk, Splunk Enterprise
• Tenable
• SIEM, IDS/IPS
• Firewalls
• Endpoint protection
• NIST, ISO 27001

Location and Schedule

• Washington, DC (Hybrid)
• Minimum 3 days onsite per week

Position Details

• Job type: Contract
• Compensation: USD 70,000 - 80,000 per year
• Minimum experience: 3 years

Selected applicants may also be subject to a background investigation, including verification of criminal history, employment and education, drug testing, and creditworthiness.