Security Analyst

Job Title Security Analyst

Overview The Security Analyst will monitor and analyze security events and alerts reported by the TSA SIEM on a 24x7x365 basis to identify and investigate suspicious or malicious activity, or other cyber events which violate TSA policy. The role requires strong organizational, analytical, and attention-to-detail skills, along with experience in analyzing information technology security events to discern legitimate security incidents. The analyst will work with various security tools and systems to ensure the security and integrity of enterprise networks and respond effectively to security threats.

Education Requirements Bachelor's Degree is preferred.

Clearance Requirements This role requires an active Secret clearance, or the ability to obtain and maintain one.

Work Arrangement On-Site

Responsibilities

Monitor and analyze security events and alerts from the TSA SIEM on a 24x7 basis.

Investigate suspicious or malicious activity and other cyber events.

Use ticket management systems to document and maintain security incident information.

Monitor the operational status of security monitoring components and escalate outages.

Identify malicious code and malicious activities within enterprise systems and networks.

Review security event logs and analyze security logs from various systems.

Collaborate with team members to implement counter-measures and mitigation controls.

Escalate security incidents and coordinate response efforts.

Maintain awareness of emerging security threats and vulnerabilities.

Support security investigations and incident response activities.

Required Qualifications

1 year of experience in cybersecurity or security operations.

Experience working with SIEM platforms such as Splunk.

Knowledge of security tools like Trellix, Crowdstrike, and endpoint detection tools.

Experience with different security tools such as Elastic, Sentinel, etc.

Strong understanding of network communications and routing protocols (TCP, UDP, ICMP, BGP, MPLS).

Working knowledge of operating systems including Windows, OS X, Linux.

Familiarity with Windows Active Directory.

Experience working with ticket management systems.

Security+ certification or higher.

Desired Skills

Experience with incident response processes.

Knowledge of security monitoring and alerting best practices.

Familiarity with enterprise security architecture and counter-measures.

Experience with log collection, analysis, and correlation tools.

Ability to work long shifts and adapt to shift work schedules.

Pay Range Pay range: $70,000.00–$100,000.00 (annual)

Why Apply This is a mission-critical role offering the opportunity to work in a dynamic security environment supporting national security. You will be part of a dedicated team using cutting-edge tools to protect vital infrastructure. If you are passionate about cybersecurity and ready to make an impact, we encourage you to apply.

Equal Employment Opportunity Take2 is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or any other characteristic protected by law. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Careers@Take2it.com .