Senior Security Operations Analyst 3 - Proposal

100% Onsite at the National Indian Gaming Commission located at: 550 12th Street SW, Washington, DC 20024

Schedule: Monday through Friday, 8:00 AM to 5:00 PM, excluding Federal Government holidays

Pay Rate: $50-$55/hr

*Hires are contingent upon contract award*

The Senior Security Operations Analyst will provide a senior security analysis who will perform activities as follows with minimal supervision and guidance:

a. Perform all security analysis activities according to established standards.

b. Maintain threat awareness and monitor NIGC information systems for exploits and any suspicious activities; analyze aggregated logs and reports from security tools.

c. Develop a daily security analysis and reporting checklist and execute activities identified in the checklist.

d. Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.

e. Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.

f. Develop detection and response configuration policies to increase automation and alerting.

g. Develop Incident handling procedures.

h. Execute Incident Response activities to include all associated actions according to the NIGC incident response plan.

i. Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.

j. Collect security operations performance and NIGC security posture management metrics and prepare NIGC threat reports to inform risk management decisions.

Proposed personnel shall possess the required level of experience relevant to the performance of the specified tasks and, where practicable, hold industry-recognized certifications that validate their technical competencies. Experience levels shall be defined by the number of years performing in the designated role as follows: a minimum of six (6) continuous years for senior-level personnel.

Requirements

Bachelors Degree in InfoSec/Cyber/Technical discipline - Relevant IT certifications may be substituted for a formal college degree; however, demonstrated hands-on experience in performing the required tasks is mandatory and may not be substituted.

Senior-level experience: Minimum 6 years of hands-on cybersecurity/security analysis experience, with the ability to operate independently with minimal supervision.
Threat monitoring & analysis: Continuously monitor systems for threats, analyze logs and security tool outputs, and maintain strong situational awareness of suspicious activity.
Incident response & procedures: Execute incident response activities, develop incident handling procedures, and support investigations with accurate and complete data.
Continuous monitoring & threat hunting: Apply continuous monitoring practices, evaluate security controls, and perform proactive threat hunting to ensure system security (CIA triad).
Security operations execution & improvement: Develop and follow daily security analysis checklists, validate logging/data retention, create detection and response policies, and produce metrics/reporting to drive continuous improvement and automation.