Cyber Threat Analyst Sr - 2nd Shift

Gulfstream Aerospace Corporation

Savannah, Georgia 31401
14/10 /2020
JOB ID: 156302 Specialty: Information Systems




Unique Skills:

Experience with Endpoint Detection and Response (EDR) or Antivirus products preferred. Shift work may be required.

Education and Experience Requirements:

Bachelor's Degree or equivalent combination of education and experience to successfully perform the essential functions of the job. Degree in information security, Computer Sciences or Technology related field preferred. Five (5) years of related experience.

Position Purpose:
The Cyber Threat Analyst Sr. conducts computer forensic investigations, data recovery, and electronic discovery. The analyst will perform monitoring and analysis of security systems data from multiple security components including but not limited to firewalls, IPS, VPN, web filtering, SIEM systems, host based intrusion detection, email filtering etc. The analyst supports the Threat Detection team in escalations and will participate on an incident response team.

Principle Duties and Responsibilities:

Essential Functions: 14. Conducting forensic collections of electronic evidence including information system and network devices for legal, human resources, ethics, and information security. 2. Utilizing forensic software/hardware applications to analyze digital media; determining solutions for recovery of potentially relevant information. 3. Examining and analyzing network traffic, related applications and operating systems to identify potential threats, anomalous or malicious activities to network resources; validating Intrusion Detection System alerts. 4. Analyzing security data to effectively detect intrusions & attempted intrusions and to initiate and engage the proper resources to mitigate the risk 5. Improving documentation and reporting processes for cyber incidents. 6. Assisting in the design and implementation of the organizational information security solutions, and continuously enhancing information security approaches and methodologies. 7. Participating in an incident response team in addressing and managing the aftermath of a security breach or attack. 8. Identifying, analyzing, and reporting threats or hidden events within the enterprise network by using defensive measures and information collected from a variety of sources to protect data, information systems, and networks. 9. Provides technical and administrative support and performs a range of investigations of information security systems. 10. Collects, analyzes and presents digital-related evidence in support of cyber investigations. 11. Perform analysis and investigations using data from firewalls, IPS, VPN, web filtering, SIEM, IDS, email filtering and forensic tools.

Additional Functions: 1. Able to be on call for incidents and problems; also able to work different shifts. 2. Able to travel as needed. 3. Proficient in the use of incident response and forensics tools such as FTK, Encase, and Cellebrite. Perform other duties as assigned.

Other Requirements: 1. Must have an understanding of cyber forensics, networking, and information security technologies and be able to demonstrate outside-the-box thinking and continuous learning. 2. Experience with the following operating systems: Windows, OSX, IOS, Linux or UNIX. 3. Security Certification such as CISSP, CEH, ACE, EnCE, CCE, Security+ etc. is a plus.
A credit history check from a national credit bureau will be conducted for all candidates for this position including new hires and current employees seeking promotion or transfer.

Additional Information

Requisition Number: 156302

Category: Information Systems

Percentage of Travel: Up to 25%

Shift: Second

Employment Type: Full-time

Posting End Date: 10/30/2020

Equal Opportunity Employer/Veterans/Disabled.

Gulfstream does not provide work visa sponsorship for this position, unless the applicant is a currently sponsored Gulfstream employee.

Savannah, GA

Savannah, Georgia