Senior Cyber Defense Analyst

SAIC is seeking a Senior Security Engineer to support the Portsmouth Naval Shipyard (PNSY) Information Technology Programs for the Dept of the Navy. This initiative leverages advanced technologies and integrates critical defense systems to optimize ship maintenance through IT applications, systems, and training, ensuring sustained mission success in naval ship maintenance operations.

Work is performed on site in Kittery, ME.

Role: Actively monitor, detect, and respond to cybersecurity threats and incidents within an organization. Utilize advanced security tools and technologies, such as Host-Based Security System (HBSS) and Security Information Event Management (SIEM) platforms, to continuously monitor network traffic, identify vulnerabilities, and detect suspicious activities. Conduct thorough investigations of security incidents, implement incident response protocols, and coordinate remediation efforts to mitigate potential risks. Collaborate with IT teams to enforce security policies, deploy updates, and ensure the overall integrity and confidentiality of information systems. Provide expert analysis on emerging threats, recommend proactive security measures, and contribute to the development of robust cybersecurity strategies. Play a critical role in maintaining a secure operational environment by ensuring rapid identification and response to cybersecurity threats. Utilize DoD standard software tools to conduct vulnerability scans and assist local Systems Administrators in maintaining positive Vulnerability Management (VM) control of systems.

Responsibilities:    

• Scan: Utilize DoD standard software tools to conduct vulnerability scans of all equipment on the PSNS and IMF network for vulnerabilities.
• Vulnerability Management (VM): Assist local Systems Administrators in maintaining positive VM control of systems under their control.
• Incident Response: Assist with the identification, protection, detection, response, and recovery of cybersecurity incidents, and coordinate incident response and reporting processes.
• Host-Based Security System (HBSS): Assist with configuring, operating, troubleshooting, and maintaining endpoint security protection technologies inclusive of HBSS; and ensuring compliance with established policies and procedures and higher headquarters guidance.
• Security Information Event Management (SIEM): Assist with configuring, operating, troubleshooting, and maintaining sensor platforms.
• NNPP: Assist with maintaining VM and endpoint compliance.
• Provide on-site support, including basic network administration, basic network server administration and customer support for ship cable maintenance and repair activities at the PNSY [to] include Communication Security (COMSEC) and a majority of End Device Support items.