IT Security Analyst

Equinox Consulting Partners is seeking an IT Security Analyst for our client in Richmond, VA. The primary purpose of this position is to help coordinate and report on cyber incidents impacting the Agency. The position also involves critical duties that must continue to be performed during crisis situations and contingency operations. Only candidates local to the Richmond, Virginia area will be considered. The IT Security Analyst will work ON SITE during the initial stages of the engagement and then will be work remotely (coming into the office at least 3 days a week.)

Skills :

The IT Security Analyst is responsible for working in a 24x7 Security Operation Center (SOC) environment focusing on reviewing and assigning urgency to potential threats and are the front line when reporting security incidents. As a Tier 1 SOC Analyst, they will run vulnerability and security assessment reports, manage security-monitoring tools, and perform cybersecurity incident helpdesk functions.

General duties for this role include, but are not limited to:

• Monitor security events received through alerts from SIEM or other security tools.
• Carry out Level 1 triage of incoming issues (initially assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security or privacy data request).
• Provides knowledge in threat intelligence and cyber security defense.
• Develops, researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption.
• Identifies, deters, monitors, and investigates computer and network intrusions.
• Provides computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery.
• Conducts incident response according to departmental breach response process.
• Leads threat intelligence and incident response.
• Carry out limited incident response to end users for low complexity security incidents.
• Maintain assigned ticket queue.
• Participate actively in the resolution of incidents, even after they are escalated.