Apply on Employer Site

Amtrak · 1 day ago

Lead Cyber Watch Ops Analyst - 90402954 - null

United States

Full-time

Remote

Mid, Senior Level

$104K/yr - $134K/yr

6+ years exp

Amtrak connects businesses and communities across the country, prioritizing the safety of passengers and employees. The Cyber Watch Operations Analyst is responsible for supporting the day-to-day operations of the Cyber Threat Command Center, focusing on cybersecurity incident management and threat analysis to protect the organization's systems and data.

Service IndustrySoftwareTourismTravel

Comp. & Benefits

H1B Sponsor Likely

Responsibilities

Ability to work under pressure, prioritize tasks, and meet deadlines in a fast-paced environment

Ability to think critically and like threat actors

Strong analytical and problem-solving skills, with the ability to assess complex situations and make informed decisions

Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means

Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies

Ability to interpret the information collected by security tools

Knowledge of attack vectors, threat tactics, and attacker techniques

Preferred ability for effective communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated

Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required

Responsible for delivery of security solutions for activity‐based assignments, executing and resolving problems within specified area

Monitor Cyber security anomalies, investigate, resolve and escalate Cyber Security events, incidents and problems

Search for potential vulnerability, exploit, or “0” Day based on the user behavior, Endpoint threat detection, Network behavior analytics, artificial engine alarms and managed security reports

Review Firewall, IDS/IPS logs, web content filtering logs, net flow device logs, antivirus logs

Lead Cyber Security tools (SIEM, EDR, CASB etc.) administration

Lead Periodical check for company policy violation / Support the investigation on policy violation

Lead Cyber security audits and inspecting security logs to uncover possible security violations

Generating, gathering, and tracking security metrics, developing scorecards for the metrics, and communicating the results Supports and participates in formal reporting related to Cyber Security Operations

Monitor security events and develop Cyber security controls across the enterprise

Lead Security support efforts for application and infrastructure related projects

Lead application security risk assessments for new or updated internal or third-party applications

Conduct quality test activities and validates test completeness in preparation for go‐live

Responding and resolving problems, security incidents and forensic investigations

Investigates, resolves and escalates problems. Monitors and analyzes metrics to ensure customer satisfaction and vendor performance

Lead vulnerability and risk analysis using commercial tools or custom scripts and documenting found gaps

Qualification

Cybersecurity incident managementCyber threat analysisSIEMEDRCASBVulnerability managementProfessional security certificationsOperational Technology knowledgeAnalytical skillsCommunication skillsInterpersonal skillsProblem-solving skills

Required

Bachelor's degree in computer science, Information Systems, or related field plus 6+ years relevant experience required or 9+ years of relevant work experience required to satisfy education and experience requirements

Professional security‐related certifications (e.g. Security+, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), etc.)

Must possess excellent customer service, strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated

Strong analytical skills

Experience with SIEM, EDR, CASB, IDS/IPS, AV, DLP UEBA, FW, etc. technologies

Experience performing vulnerability management assessments

Experience working in a Cyber Security Operations (or SOC) as an analyst