5219 - Security Information Analyst

POSITION SUMMARY:
The Information Coordination and Analysis Team (iCAT) within the CERT
Program’s Coordination Center (CERT/CC) facilitates the flow of security
threat information between stakeholders, including internal technical
analysis teams, vendors, partners, sponsors, researchers, and other
collaborators. We have an open position on the team that is responsible
for ensuring the collection, analysis and delivery oyber security threat
information.

The successful candidate will be responsible for conducting technical
analysis of cyber security threat information received from a variety of
sources, coordinating response actions and disseminating technical
information as appropriate in support of the protection of national
security, including economic and infrastructure security.  Key
responsibilities include:


•Monitoring, managing, and coordinating the information collection and
cataloging activities from a variety of public and private analytical
information sources
•Corresponding with internal analysis teams, sponsors, reporters, and
other Computer Security Incident Response Teams (CSIRTs)
•Managing the authentication of vendor contacts, which includes
validating encryption keys and technical diagnosis of problems related
to various channels of communication
•Conducting technical investigation and analysis of computer security
incidents and coordinating incident response activities
•Assessing the severity of security threats (e.g., incidents,
vulnerabilities, malicious code) and coordinating broad notifications
•Performing initial surface analysis of vulnerability reports and
coordinating responses to incoming email sent to the CERT® Coordination
Center
•Answering hotline telephone inquiries during normal business hours and
outside of business hours as required
•Developing and maintaining procedural documentation and participating
in internal tools specification

This position could be located in either Pittsburgh, PA or Washington D.C.  The working hours for this position will be 10:00 AM to 7:00 PM.

Education/Training:
Bachelor of Science in Computer Science, Information Science,
Information Systems Management and three years equivalent experience.

Licenses:
N/A.

Experience:
Candidates should have at least three years of user-level experience in
a Windows or Unix/Linux environment and be able to demonstrate knowledge
of one or more of the following:
•various Internet protocols (e.g. TCP/IP, DNS, HTTP)
•one or more security technologies (e.g. encryption, firewalls, antivirus)
•computer security incident handling and analysis
•at least one enterprise-class language (e.g. Java, C++, C)

Skills/Abilities:
Successful candidates will:
•have a strong interest in and possess basic knowledge of network and
computer security issues
•be able to work meticulously with careful attention to detail
•be able to communicate effectively within a team environment
•recognize and deal appropriately with confidential and sensitive
information
•interact effectively with technical and non-technical audiences via
both verbal and written communications

Mobility:
Primarily sedentary, long periods of sitting, may have to travel to
other campus locations or customer sites, some bending, stretching and
lifting up to several reams of paper.

Environmental Conditions:
Normal office conditions; close contact with computer display for
extended periods of time.

Mental:
Ability to work under pressure; pay attention to detail; meet inflexible
deadlines; deal with difficult individuals while maintaining composure.

Other:
Candidate must be able to pass background investigation, obtain a
security clearance and be a citizen of the United States.

ESSENTIAL FUNCTIONS:
(1) Monitoring, managing, and coordinating the information collection
activities from a variety of public and private sources (e.g. mailing
lists, web sites, RSS feeds), performing surface analysis, and then
redistributing to interested parties.

(2) Coordinating activities related to requests for, and providing
assessment of the severity of computer security incidents and
coordinating incident response activities.

(3) Performing technical, logistical, and analytical support assisting
in the establishment of the core program for trusted internet connection
compliance validation.

(4) Managing the authentication of vendor contacts, which includes
validating encryption keys and technical diagnosis of problems related
to various channels of communication.

(5) Answering the CERT telephone hotline during normal business hours
and when on call, outside of normal business hours.

(6) Represent and present material in open forums and conferences.

(7) Travel for training, conferences, and customer meetings.

TO APPLY:
Careers@CarnegieMellon makes it easy for you to search for positions at
the SEI that match your interests, apply for positions electronically,
and create a Job Agent that will notify you by email when jobs that meet
your criteria become available.

Please visit the Careers@CarnegieMellon web site
( https://secured.kenexa.com/cmu/cc/Home.ss) to create a profile and
apply to this position (job number 5219).