Job Summary
Cybersecurity Operations Analysts monitor and analyze security events and incidents to identify potential threats and vulnerabilities within the institution's information systems. This role involves responding to security incidents, conducting investigations, and providing recommendations for improving the institution's cybersecurity posture.
Responsibilities
- Monitor and analyze security events and alerts continuously to detect potential threats and vulnerabilities within the institution's information systems.
- Respond to security incidents by conducting thorough investigations, documenting findings, and implementing corrective actions to mitigate risks.
- Conduct regular security assessments and vulnerability scans to identify weaknesses in systems and applications, providing recommendations for remediation.
- Prepare detailed reports on security incidents, including analysis of the incident, impact assessment, and recommendations for future prevention.
- Stay informed about emerging cybersecurity threats and trends, evaluating their potential impact on the institution and adjusting security measures accordingly.
- Provide support during security audits and compliance assessments, ensuring that the institution meets regulatory requirements and industry standards.
- Develop and implement security monitoring and logging strategies to enhance the detection of suspicious activities and facilitate incident response.
- Train and educate staff on security best practices, fostering a culture of cybersecurity awareness throughout the institution.
- Collaborate with the cybersecurity team to develop and maintain incident response plans and procedures that outline the institution's approach to handling security incidents.
- Perform other duties as assigned.
Required Qualifications
Educational Requirements
Associate degree in related discipline or equivalent, related experience.
Required Experience
Six or more years of relevant experience.
Preferred Qualifications
Additional Preferred Qualifications
- Ability to obtain a secret security clearance
- Experience in implementing Splunk applications, tools, and add-ons, including ES and SOAR
- Solid technical understanding of cybersecurity concepts, standards, guidelines, and principles
- Strong written and oral communication skills
- One or more baseline specialized certifications such as: Splunk Cloud Certified Admin, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Crowdstrike Certified Falcon Responder
Preferred Educational Qualifications
Bachelor's degree in related discipline or equivalent, related experience.
Other Information
- This is not a supervisory position.
- This position does not have any financial responsibilities.
- This position will not be required to drive.
- This role is considered a position of trust.
- This position does not require a purchasing card (P-Card).
- This position will not travel
- This position does not require security clearance.
Salary Range: $112,410. - $164,062.
Atlanta, GA
Background Check
Successful candidate must be able to pass a background check.
Equal Employment Opportunity
The Georgia Institute of Technology (Georgia Tech) is an Equal Employment Opportunity Employer. The Institute is committed to maintaining a fair and respectful environment for all. To that end, and in accordance with federal and state law, Board of Regents policy, and Institute policy, Georgia Tech provides equal opportunity to all faculty, staff, students, and all other members of the Georgia Tech community, including applicants for admission and/or employment, contractors, volunteers, and participants in institutional programs, activities, or services. Georgia Tech complies with all applicable laws and regulations governing equal opportunity in the workplace and in educational activities.
Equal opportunity and decisions based on merit are fundamental values of the University System of Georgia ("USG") and Georgia Tech. Georgia Tech prohibits discrimination, including discriminatory harassment, on the basis of an individual's race, ethnicity, ancestry, color, religion, sex (including pregnancy), national origin, age, disability, genetics, or veteran status in its programs, activities, employment, and admissions. Further, Georgia Tech prohibits citizenship status, immigration status, and national origin discrimination in hiring, firing, and recruitment, except where such restrictions are required in order to comply with law, regulation, executive order, or Attorney General directive, or where they are required by Federal, State, or local government contract.