Security Analyst

Company Overview
Metrea is a defense company dedicated to translating commercial innovation into solutions for the hardest problems in national security. With deep mission expertise, Metrea focuses on delivering effects as-a-service across a spectrum of domains including Air & Space, Electromagnetic & Cyber, and Synthetic. Metrea Management provides central services to eleven (11) global capability units via Operations, Solutions, Strategy, Legal, and Finance teams. 

Capability Unit 

Metrea Management is our global shared service providing support for the Capability Units (CU) in areas such as People, Finance, Legal, Strategy and Information Technology. 

Position Summary
Metrea’s Platform Technology Team is searching for a results-oriented Security Analyst with a deep understanding of the M365 technical and security capabilities. Aerospace industry experience would be ideal. Primary responsibilities are focused on cybersecurity analytics, evaluating events and logs that are generated by the infrastructure and security tools. Further responsibilities include threat hunting, software security and risk assessment, vulnerability management, testing and optimization of security events and dashboards. The position will require a strong technical background and good understanding of general cybersecurity events and tables, coupled with the ability to interact with all levels of personnel. As a member of the security operations team, we drive to be part of a security-conscious culture, collaborating closely with engineers, developers and executives to create a security infrastructure built on the highest quality of standards that is to be tested and reported to meet regulatory expectations.

Reasonable Accommodations Statement
To perform this job successfully, the individual must be able to perform each duty listed below satisfactorily. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions.

Essential Functions Statement:

• Work closely with the security and operations team to develop and enhance cybersecurity needs to the overall infrastructure.
• Review and manage the security dashboards for suspicious activities.

• Continuous monitoring of enterprise security systems, SIEM and other tools to support incident and response protocols.
• Analyze logs from various sources to support the development of security alerts.
• Investigate and respond to incidents and alerts generated from Metrea’s security stack.
• Conduct periodic threat analysis and hunting to identify emerging threats and proactively remediate emerging vulnerabilities.
• Generate and review security reports for senior management.
• Support our Security Awareness Training efforts by researching evolving phishing payloads for simulation testing activities within the environment. 
• Support the generation of Simulation Testing reports across the enterprise as needed for senior management.
• Support the evaluation and improvement of cybersecurity policies and procedures.

• Work closely with the IT Operations team to support the vulnerability management program and remediation activities including software updates and patch management activities.

• Capable of identifying, prioritizing, strategizing and mitigating risks associated across the enterprise.
• Staying current with emerging security threats, technologies and trends to develop and implement cybersecurity awareness programs, promoting a culture of security within Metrea.

 Competency Statements

• Self-motivated; team oriented; responsible, and reliable.
• Positive attitude and proactive style. Candidate must have the ability to work in a structured, yet variable environment.
• Knowledge of incident and response as well as forensic analytics and investigation methodology. 
• Knowledge of network security protocols and endpoint protection methodologies.
• Familiar with threat intelligence, threat analytics and threat hunting techniques.
• Expertise in using SIEM to aggregate, analyze and respond to security events and alerts.
• Capable of documentation writing and supporting