Apply on Employer Site

AV · 1 month ago

Cybersecurity Analyst II

US Regional

Full-time

Onsite

Entry, Mid Level

$72K/yr - $102K/yr

2+ years exp

AeroVironment is a global leader in unmanned aircraft systems and tactical missile systems. The Cybersecurity Analyst II will work with the Cyber team on various Information Security tasks, including GRC efforts, compliance documentation, and managing the Cyber help desk while ensuring security configurations are aligned with expected frameworks.

AerospaceAir TransportationDronesElectric VehicleElectronicsEnergyGovernmentManufacturing

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Primarily GRC role with team management responsibilities

Support IT projects by participating in the design, development, and implementation of information systems to ensure these systems include security features and meet compliance needs

Perform security analysis during documentation reviews to validate company policies, procedures, and requirement are met

Tier 2 Cyber help desk duties, including handling issue escalation and resolution, supporting the team in maintaining

Perform vetting and review of software for inclusion on/exclusion from the production network

Take on assessment, documentation, and implementation support for ISO 27001 certification efforts

Assist with risk assessment, system and communication analysis, development of compliance processes and documentation, to include, but not limited to, RMF, NIST SP 800-171, and CMMC

Support implementation of CMMC Level 3 efforts

Support Cyber team’s efforts towards vulnerability management, triaging alerts, and cyber incident management

Evaluate requested changes and make actionable recommendations

Assist in maintaining and developing the InfoSec Team’s process documentation

Exercise independent judgment in determining the methods, techniques, and evaluation criteria used in obtaining results; challenges are sometimes unique

Provide customer service and inter-departmental support

Analyze email and communicate with Cybersecurity Operations team on suspicious communications

Other duties as assigned

Qualification

CybersecurityRisk ManagementIncident ResponseGRC ExperienceSecurity+ CertificationA+ CertificationNetwork SecurityCyber Tools ProficiencyISO 27001 KnowledgeNIST SP 800-171 KnowledgeCustomer ServiceEnglish CommunicationTeamworkAttention to DetailProblem SolvingAdaptabilityInitiative

Required

Associates degree in a science related field is required or equivalent combination of education, training, and experience

Minimum 2-5 years' experience in cybersecurity, risk management, threat mitigation, incident response, at an enterprise level

Active A+ and/or Net+ certification(s)

Have active Security+ certification

Demonstrated experience using cyber tools, cyber-SaaS monitoring, IAM platforms, LANs, WANs, VPNs, Firewalls, intrusion detection/prevention systems, SIEMs, data loss prevention software, antivirus/antimalware products, forensics, and analysis systems

Solid understanding of network security, implementation, and documentation

Deep familiarity with cybersecurity frameworks and regulatory requirements (NIST SP 800-171, NIST CSF, CMMC, ISO 27001, ITAR/EAR)

Strong English language skills, both verbal and written

Works with clients and customers to assess their needs, provide information or assistance, and assist in resolve their problems. Utilizes knowledge related to information security to resolve inquiries

Expresses information to individuals or groups effectively considering the audience and nature of the information. Provides satisfactory guidance or recommendations on corrective actions to identified procedural or systems deficiencies. Interacts collaboratively with others and can negotiate and resolve issues associated with information security

Is thorough when performing work and conscientious about attending to detail. IT-related experience demonstrating this competency include reviewing accreditation documentation to ensure adherence to compliance regimes

Displays reasonable judgment in Identifying, and resolving, problems. Uses sound judgment to generate and evaluate alternatives and make recommendations