Cyber Incident/Forensic Analyst

About the role

General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies.

This role is part of the Cybersecurity Defense Operations career track, focusing on security monitoring, enforcement, and operational risk reduction. The position may transition to fully on-site as business demand and requirements change.

Responsibilities

• Primary Focus: Incident response, risk analysis, and advanced troubleshooting.
• Day-to-day management and monitoring of security systems after implementation by the Cybersecurity teams.
• Perform network observability, threat detection, security metrics reporting, and automation-driven operational workflows to maintain continuous visibility into the organization’s security posture and enable rapid identification and response to security events.
• Escalate complex changes or advanced troubleshooting to engineers.
• Security Policy Enforcement & Engineering: Implement and integrate enterprise security technologies, ensuring security policies are effectively enforced across hybrid environments. Analyze policy effectiveness and recommend adjustments. Ensure security policies remain enforced across security systems and services. Work closely with engineers for major updates and reconfigurations. Leverage network observability data and security telemetry to support threat detection, validate policy effectiveness, and produce actionable metrics for operational and executive visibility. Apply automation workflows to policy enforcement and validation processes.
• Technical Consulting & Business Support: Advise internal teams on security control best practices, aligning security solutions with business needs. Provide data-driven consulting, supported by metrics and threat intelligence, to improve decision-making. Provide on-site support for cybersecurity, infrastructure, and business solutions.
• Cybersecurity Asset & Patch Management: Monitor patch compliance and troubleshoot patch-related security issues. Use security telemetry and network observability to identify patch-related risk exposure, enhance threat coverage, and support metrics reporting on compliance posture.
• Complex Security Solution Development: Develop scripts and automation to streamline security solution deployments, focusing on segmentation and VPN automation. Expand workflow observability and metrics reporting pipelines to measure solution deployment effectiveness and security impact.
• Security System Implementation & Optimization: Optimize security tools for better efficiency and integration. Maintain and manage deployed security systems such as firewalls, VPNs, and segmentation controls, ensuring continued security enforcement and policy compliance. Support the design and implementation of security enforcement technologies. Integrate network observability frameworks and threat detection capabilities into deployed systems to provide performance, risk, and compliance visibility. Use automation workflows to enhance monitoring, tuning, and operational response processes.
• Collaboration with Cybersecurity Teams: Support operational security teams by ensuring all security technologies are correctly integrated and aligned with enforcement policies. Create and advance automation workflows that improve operational efficiency and incident response effectiveness. Mentor other analysts and engineers and contribute to process improvements.

Qualifications

• Typically requires a bachelor’s degree in a related discipline and two or more years of progressive professional experience in cybersecurity or a related field. Equivalent professional experience may be substituted in lieu of education.
• 3–5 years of hands-on cybersecurity experience preferred.
• Understanding of security practices and threat landscapes.
• Quickly adopts new tools and contributes to process improvement.
• Effective communicator with end users and technical teams.
• Capable of resolving moderately complex technical issues.
• Works well independently and collaboratively.
• Ability to obtain and maintain a DoD Secret clearance.

Skills

• Desired Certifications: GSEC, CEH, CySA+, or equivalent intermediate certification.
• Desired Experience: Next-Generation Firewall (NGFW) technologies.
• Technical Skills: Python, PowerShell, Java, Bash, KQL/SQL.
• Relevant Certifications: AWS Solutions Architect – Associate, Microsoft Azure Administrator, CompTIA Cloud+, Cisco CCNA, Palo Alto, M365 Security.
• Effective communicator, collaborative team player, and adaptable under pressure.

Pay

Salary range: $73,700 - $128,780

Schedule

Full-Time