GCYBER Cyber Protection Team Master Host Analyst (Microsoft Windows) Salary in the United States

GCyber is an information technology services company that was founded to create innovative forward-leaning solutions to enhance the capabilities of our customers.  GCyber engineers have satisfied the technology needs of the U.S. Government for over 20 years.  We maintain relationships with key researchers, scholars, and analysts who have specialized expertise in the federal market.  GCyber’s broad experience, focus toward desired outcomes, and commitment to innovation ensures responsive and long-lasting results.

This position requires the candidate to actively hold a DoD TS/SCI with CI Poly security clearance.
 
Responsibilities:

• Analyze Windows-based file systems, permissions, and operation system configurations in order to detect vulnerabilities and intrusions
• Capture memory of individual processes on Windows-based systems, perform analysis using built-in tools and capabilities
• Navigate and search Windows file system structure and common processes for vulnerabilities, anomalies, backdoors, rootkits, remote-access tools, malware, etc.
• Perform initial triage procedures on potentially malicious/compromised Windows systems and follow best business practices
• Patch system vulnerabilities to ensure information is safeguarded against outside parties
• Monitor operational environment and report on adversarial activities which fulfill leadership's priority information requirements
• Conduct network and system level reconnaissance and vulnerability analysis of other systems within a network
• Identify and conduct network mapping and operating system (OS) fingerprinting activities
• Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity
• Conduct open source data collection via various online tools
• Edit or execute scripts (e.g., PowerShell PERL, VBScript) on Windows systems to perform tasks such as: parsing large data files, automating manual tasks, and fetching/processing remote data
• Deploy cyber tools to a target Windows system and utilize them once deployed (e.g., backdoors, sniffers)
• Determine and document software patches or the extent of releases that would leave Windows software vulnerable
• Identify Windows applications and operating systems of a network device based on network traffic
• Validate intrusion detection system (IDS) alerts
• Confer with systems analysts, engineers, programmers, and others to design application and to obtain information on project limitations and capabilities, performance requirements, and interfaces
• Evaluate Windows system security architecture and its design against cyberspace threats as identified in operational and acquisition documents
• Perform security reviews and identify gaps in Windows environment security architecture and develop a security risk management plan
• Provide and maintain CPT documentation for TTPs as inputs to training programs
• Work with stakeholders to resolve Windows computer security incidents and vulnerability compliance
• Identify potential points of strength and vulnerability among Windows segments of a network map
• Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within a given Windows network enclave
• Detect exploits against targeted networks and Windows hosts and react accordingly
• Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on Windows systems and information
• Isolate, extract, analyze, remove, and document malware on Windows systems
• Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan
• Plan and recommend modifications or adjustments based on exercise results or system environment

Requirements:

• Bachelor's degree desired, but not required
• 7+ years of experience in any combination of cyber technology, cybersecurity, offensive cyber operations, penetration testing, coding/scripting, vulnerability assessments, network/system administration, or related fields
• 4+ years of experience conducting or supporting Cyber Mission Forces exercises
• Must possess advanced knowledge of Enterprise Windows Services and the security configuration of them
• Experience with Virtualized Software Security and PowerShell for developing common automation tasks and custom modules and functions in order to identify anomalies or suspicious machines
• 5+ years of experience as a Certified Senior Level Analyst
• Must be compliant with:
  • Windows System Analyst Senior Level Certification
  • Advanced Security Onion Course Certification
  • Advanced Network Forensic and Analysis Certification
  • GIAC Certifications: GCIA, GSNA, GNFA
  • Offensive Security Certified Practitioner (OSCP)
  • Offensive Security Certified Expert (OSCE)
  • SIEM with Tactical Analytics (SEC555) completion
• Active TS/SCI security clearance with a CI polygraph, or the ability to obtain and maintain a CI polygraph

For more information about GCyber please visit our website at http://www.gcyber.com.  Also please stay in touch and track future job openings by following us on LinkedIn http://www.linkedin.com/company/gcyber.
 
By submitting your resume for this position, you understand and agree that GCyber may share your resume, as well as any other related personal information or documentation you provide, with its partners and affiliated companies for the purpose of considering you for other available positions.
 
GCyber is an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identify, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.