Senior Cybersecurity Operations Analyst

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

⚙️ Operations

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cherokee Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1969

🏥 Healthcare

📦 Logistics

🏭 Manufacturing

Healthcare • Logistics • Manufacturing

Cherokee Federal is a U. S. federal systems integrator and government contractor that empowers mission success for more than 60 U. S. federal agencies. With a global workforce of over 5,000, it delivers advanced technology (cloud, cybersecurity, data & analytics), health services, intelligence analysis and operational support, logistics and sustainment, mission-critical manufacturing, program and engineering technical services, and dynamic contracting solutions to support federal priorities and national security. Cherokee Federal is part of Cherokee Nation Businesses and focuses on mission-focused, U. S. -made solutions.

📋 Description

• Provide cybersecurity and Information Assurance expertise in support of the Agency’s Security Program • Support cybersecurity incident-handling activities • Assist with vulnerability detection and develop vulnerability-remediation strategies • Provide expertise on secure application-development techniques • Support secure baseline configuration validation, security audit-log monitoring, and static-code vulnerability scanner integration and management • Support the security portion of DevSecOps implementation • Develop and maintain cybersecurity architecture diagrams • Develop processes, procedures, and Standard Operating Procedures for DevSecOps and cybersecurity activities • Maintain inventories of network ranges, assets, groups, and custom groups in the DOT CDM BigFix tool • Assist with remediation of cybersecurity issues identified through security reports • Maintain core system documentation, technical guides, baseline-management documentation, and checklists • Maintain and update cybersecurity handbooks, secure configuration procedures, incident-handling procedures, threat/vulnerability/risk monitoring SOPs, and continuous-monitoring risk management plans • Coordinate with functional teams to collect audit and evaluation documentation and artifacts • Draft responses for FISMA, CFO, OIG, GAO, and other audits or evaluations; track and report findings and recommendations • Support Government suspense dates, cybersecurity data calls, and other Government inquiries • Provide programmatic cybersecurity assistance and guidance to system owners • Execute information-system contingency-plan testing per NIST guidance; provide training, capture lessons learned, and track corrective actions • Support updates to information-system contingency plans based on testing results • Review suspicious log activity to identify, investigate, and support response to cybersecurity incidents • Help personnel understand ISCP roles and system-recovery responsibilities • Support risk analysis and mitigation activities • Provide recommendations addressing cybersecurity threats, vulnerabilities, and risks • Assist with cybersecurity awareness communications and outreach • Perform other job-related duties within the program scope

🎯 Requirements

• Bachelor’s degree in Cybersecurity or a related technical field • 6+ years in security operations, vulnerability management, or offensive security domains, including experience in a senior or lead capacity • Must satisfy all applicable Cherokee Federal, Government and DOT personnel-security and background-screening requirements • Must possess or be able to obtain a DOT Public Trust clearance • Current, verifiable Certified Information Systems Security Professional (CISSP) certification • Current, verifiable Certificate of Cloud Security Knowledge, Microsoft Azure certification, or another recognized cloud-security certification • At least three years of experience in contingency planning, backup and recovery best practices, and NIST contingency-planning guidance • Expert knowledge and experience with Federal cybersecurity and privacy laws, regulations, policies, procedures, implementation standards, and cited NIST/FIPS standards • Knowledge of incident handling, vulnerability detection, vulnerability management, remediation, secure application development, cloud environments, and cloud services • Understanding of FISMA assessment and authorization, GSA FedRAMP processes, and current cloud-service technologies • Experience applying Federal Information Security Continuous Monitoring and Continuous Diagnostics and Mitigation technologies • Understanding of static-code vulnerability scanning, vulnerability-management tools, and security audit-log monitoring • Expert experience with enterprise security architecture methodologies, concepts, procedures, principles, and tools • Knowledge of secure configuration, baseline validation, application-security testing, assessment results, and remediation practices • Experience conducting vulnerability, application-security, database-security, and network-security assessments • Understanding of Identity, Credential, and Access Management implementation • Knowledge of domain structures, network protocols, authentication, digital signatures, firewalls, data-loss prevention, IDS/IPS, and security best practices • Knowledge of Windows Server, Linux/Unix, Active Directory, and related operating-system services • Knowledge of Federal cybersecurity audits and evaluations, including FISMA, OIG, and GAO activities • Experience with risk-management tools, including JCAM (formerly CSAM) • Proficiency with Microsoft Word, Excel, PowerPoint, Visio, Teams, Tableau, and SharePoint • Ability to manage multiple concurrent priorities • Desired certifications include ITIL v3 or later and relevant certifications from ISC2, SANS, EC-Council, Microsoft, Cisco, or similar organizations