Cyber Defense & Vulnerability Operations Analyst
Na Ali'i Consulting & Sales, LLC. · Posted Nov 4, 2024
- Charleston, South Carolina, United States
- On-site
- Full-time · Mid
- 4+ years
Supports Navy ERP through continuous security monitoring, alert analysis, and enterprise vulnerability management, investigating indicators of compromise across databases, operating systems, and middleware.
Responsibilities
- Monitor real-time security alerts from Splunk, Tripwire, and HBSS in accordance with SOPs.
- Triage, analyze, and escalate suspicious events, anomalous behaviors, and security incidents.
- Conduct deep-dive activity monitoring across core Navy ERP architecture (SAP HANA, Oracle, Sybase, Windows Server, Linux, Tripwire, webMethods, IBM Tivoli).
- Develop, refine, and optimize correlation searches within Splunk Enterprise Security.
- Tune detection logic to eliminate false positives and enhance detection fidelity.
Requirements
- Nice to have: Splunk Certified Cybersecurity Defense Analyst
- Nice to have: Splunk Core Certified Advanced Power User
- Nice to have: DISA HBSS 201/301 Administrator training
- Nice to have: Tenable ACAS certification