Cybersecurity Analyst II

Worker Type

Regular

Job Description

 

Summary

The Cyber Security Analyst II is a crucial junior to mid-level contributor that is required to operate with managerial oversight, as a part of the global Digital Business Team. In this role, you will work with the Cyber team on a variety of Information Security tasks, to include GRC efforts, software vetting, compliance documentation, exception monitoring, and configuration support. You will be required to manage a heavy workload independently, coordinate with multiple teams across the CIO org, support compliance for the Enterprise, manage the Cyber help desk, develop processes and maintain documentation, and work with IT and Cyber teams to ensure security configurations remain aligned with expected frameworks.

Position responsibilities:

• Primarily GRC role with team management responsibilities
• Support IT projects by participating in the design, development, and implementation of information systems to ensure these systems include security features and meet compliance needs
• Perform security analysis during documentation reviews to validate company policies, procedures, and requirement are met
• Tier 2 Cyber help desk duties, including handling issue escalation and resolution, supporting the team in maintaining
• Perform vetting and review of software for inclusion on/exclusion from the production network
• Take on assessment, documentation, and implementation support for ISO 27001 certification efforts
• Assist with risk assessment, system and communication analysis, development of compliance processes and documentation, to include, but not limited to, RMF, NIST SP 800-171, and CMMC
• Support implementation of CMMC Level 3 efforts
• Support Cyber team’s efforts towards vulnerability management, triaging alerts, and cyber incident management.
• Evaluate requested changes and make actionable recommendations
• Assist in maintaining and developing the InfoSec Team’s process documentation
• Exercise independent judgment in determining the methods, techniques, and evaluation criteria used in obtaining results; challenges are sometimes unique.
• Provide customer service and inter-departmental support
• Analyze email and communicate with Cybersecurity Operations team on suspicious communications.
• Other duties as assigned

Basic Qualifications (Required Skills & Experience):

• Associates degree in a science related field is required or equivalent combination of education, training, and experience.
• Minimum2-5 years' experience in cybersecurity, risk management, threat mitigation, incident response, at an enterprise level.
• Active A+ and/or Net+ certification(s)
• Have active Security+ certification
• Demonstrated experience using cyber tools, cyber-SaaS monitoring, IAM platforms, LANs, WANs, VPNs, Firewalls, intrusion detection/prevention systems, SIEMs, data loss prevention software, antivirus/antimalware products, forensics, and analysis systems.
• Solid understanding of network security, implementation, and documentation
• Deep familiarity with cybersecurity frameworks and regulatory requirements (NIST SP 800-171, NIST CSF, CMMC, ISO 27001, ITAR/EAR)
• Strong English language skills, both verbal and written
• Works with clients and customers to assess their needs, provide information or assistance, and assist in resolve their problems. Utilizes knowledge related to information security to resolve inquires.
• Expresses information to individuals or groups effectively considering the audience and nature of the information. Provides satisfactory guidance or recommendations on corrective actions to identified procedural or systems deficiencies. Interacts collaboratively with others and can negotiate and resolve issues associated with information security.
• Is thorough when performing work and conscientious about attending to detail. IT-related experience demonstrating this competency include reviewing accreditation documentation to ensure adherence to compliance regimes.
• Displays reasonable judgment in Identifying, and resolving, problems. Uses sound judgment to generate and evaluate alternatives and make recommendations.

Other Qualifications & Desired Competencies:

• Bachelor’s degree preferred
• GRC experience
• Defense Industrial Base knowledge
• Top Secret clearance is preferred.
• Knowledge of Linux configurations and security
• Experience with Microsoft Defender, Sentinel, network mapping, vulnerability analysis
• Python for scripting, PostgreSQL for analyzing data
• Working knowledge of government regulations, e.g.NIST 800 series publications.
• Ability to investigate and review security violations, preparing reports, and recommending specific preventive and corrective action to be taken.
• Demonstrates competency in effectively adapting to rapidly changing technologies and applying them to business needs in a secure manner.
• Able to excel in a fast-paced, deadline-driven environment, where small teams share a broad variety of duties.
• Displays strong initiative and drive to accomplish goals and meet company objectives.
• Takes ownership and responsibility for current and past work products.
• Focuses on teamwork and puts the success of the team above one's own interests.

Physical Demands

• Ability to work in an office environment.
• Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard.

 Special Requirements

• U.S. Citizenship required. Presently holds or capable of obtaining a U.S. Security Clearance.
• Occasionally may be required to travel within the Continental U.S.

Clearance Level

 

Secret

The salary range for this role is:

$71,852 - $101,850

AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills.

ITAR Requirement:

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR § 120.15. Some positions will require current U.S. Citizenship due to contract requirements.

Benefits:  AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown.  For more information about our company benefit offerings please visit:  http://www.avinc.com/myavbenefits.

We also encourage you to review our company website at http://www.avinc.com to learn more about us.

Principals only need apply.  NO agencies please.

Who We Are

Based in California, AeroVironment (AVAV) is a global leader in unmanned aircraft systems (UAS) and tactical missile systems. Founded in 1971 by celebrated physicist and engineer, Dr. Paul MacCready, we’ve been at the leading edge of technical innovation for more than 45 years. Be a part of the team that developed the world’s most widely used military drones and created the first submarine-launched reconnaissance drone, and has seven innovative vehicles that are part of the Smithsonian Institution’s permanent collection in Washington, DC.

Join us today in developing the next generation of small UAS and tactical missile systems that will deliver more actionable intelligence to our customers so they can proceed with certainty – and succeed.

What We Do

Building on a history of technological innovation, AeroVironment designs, develops, produces, and supports an advanced portfolio of unmanned aircraft systems (UAS) and tactical missile systems.  Agencies of the U.S. Department of Defense and allied military services use the company’s hand-launched UAS to provide situational awareness to tactical operating units through real-time, airborne reconnaissance, surveillance, and target acquisition.

We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status.

ITAR

U.S. Citizenship required. Must be willing to work on government contracts and have the ability to obtain a security clearance.