Senior Cybersecurity Analyst

Job Family:

Cyber Consulting

Travel Required:

Up to 10%

Clearance Required:

Active Top Secret (TS)

What You Will Do:

Guidehouse Cybersecurity consultants help our clients solve complex technology and business issues from strategy through execution. A successful cybersecurity consultant at Guidehouse displays the following traits: flexibility, curiosity, ability to learn quickly, ability to think critically, strong communication skills (written & verbal) and have a grasp of a variety of technical concepts. A Guidehouse consulting career will provide the opportunity to gain experience on many different projects and technologies, as well as engage with a wide range of clients. Successful candidates will be able to contribute as thought leaders on white papers and articles, and by doing so will not only be contributing to shaping the firm, but also strengthening their personal brand and subject matter expertise.

Responsibilities of this role are as follows, to include but not limited to:

• Monitor computer networks for security issues, including investigating security breaches and other cybersecurity incidents.

• Document security breaches and assess the consequences/impacts; work with the security team to perform tests and uncover network vulnerabilities, such as penetration testing, and remediate detected vulnerabilities to maintain a high-security standard.

• Recommend best practices for IT security, install security measures and operating software to protect systems and information infrastructure, including firewalls and data encryption programs.

• Conduct analysis, confirm intrusion information and create a forensically sound duplicate of the files.

• Decrypt data and provides technical summaries and input, examines recovered data for relevant information and performs dynamic analysis to include timeline, statistical, and file signature analysis.

• Perform real-time cyber defense handling tasks to support deployable Incident Response Teams (IRTs).

• Analyze and report organizational and system security posture trends.

• Apply security policies to meet security objectives of the system.

• Ensure all systems security operations and maintenance activities are properly documented and updated as necessary.

• Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.

• Implement security measures to resolve vulnerabilities, mitigate risks and recommend security changes to system or system components as needed.

• Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.

• Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative.

• Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities, as needed.

• Verify and update security documentation reflecting the application/system security design features.

• Verify minimum security requirements are in place for all applications.

What You Will Need:

• An ACTIVE and MAINTAINED "TOP SECRET" Federal or DoD security clearance.

  • Once onboard with Guidehouse, new hire MUST be able to OBTAIN and MAINTAIN a Federal or DoD "TOP SECRET/SCI (TS/SCI)" security clearance.

• Bachelor’s Degree

• THREE (3) or more years of experience in Cybersecurity, Security Engineering, Security System Design, Security Controls, Cybersecurity Framework, Zero Trust and/or Cloud Security

What Would Be Nice To Have:

• Master’s Degree

• Certifications: CySA+, Security+, CISSP, or CASP+ or CND or relevant certifications

• TWO (2) or more years experience designing and deploying systems aligned with Zero Trust Architecture principles, threat scenarios, reference architectures, and governance frameworks.

• Experience in professional services consultancy and federal cyber security industry.

• Security principles and methods – firewalls, demilitarized zones, encryption).

• Security controls based on cybersecurity principles and tenets, NIST SP 800-53, CSF.

• Skill in developing and applying security system access controls, security system design tools, methods, and techniques, security management, network design processes (security objectives, operational objectives,