XOR Security

Job Description:
XOR Security is currently seeking talented master-level Cyber Threat Analysts to support one of our premier clients within the Department of Defense for the Defense Cyber Crimes Center (DC3). The DC3 program provides comprehensive Forensic, Malware Analysis, and Reverse Engineering support across the Defense enterprise by providing deep analysis of potential threat activity targeting critical DoD assets.  To support this vital mission, XOR staff is on the forefront of providing full spectrum Media Analysis and Systems Engineering support, to include the development of advanced tools and analysis techniques to protect critical DoD assets from hostile adversaries. To ensure the integrity, security, and resiliency of DC3’s critical operations, we are seeking a senior Cyber Threat Analyst in the Linthicum, MD, area.
The ideal candidate will apply a comprehensive knowledge across key tasks and high impact assignments and can plans and lead major technology assignments.  S/he functions as a technical expert across multiple project assignments, evaluates performance results, and recommends major changes affecting short-term project growth and success. S/he may supervise others.  The candidate will use their experience, knowledge, and analytical skills on behalf of the Air Force Lifecycle Management Center (AFLCMC) Cyber Resiliency of Weapons Systems (CROWS) effort and will produce analytical products supporting the AF cyber campaign plan to design, operate, and sustain AF systems and capabilities with security and resiliency. The candidate will perform analytical research in a team environment focused on cyber threat actors/activity, author and review intelligence products by applying technical expertise, while also consulting and making recommendations for new solutions to cyber analytical issues as needed. Additionally, the candidate will be expected to collaborate with analysts from DC3-AG, task force analysts and CROWS stakeholders outside of DC3, various other Intelligence Community agencies, and other Defense Criminal Investigative Organizations (AFOSI, CID, DCIS) on a regular basis. Successful candidates will rely heavily on experience serving in past intelligence analyst roles in DoD, Computer Network Operations, Law Enforcement/Counterintelligence, or Intelligence Community mission-focused organizations. The selected candidate should be comfortable writing documents up to 30 pages in length.
Strong written and verbal communications skills are a must.
Preferred Skills:
Required Qualifications:
<ul>
<li>Only candidates with a current TS/SCI clearance will be considered</li>
<li>BA/BS in Information Technology, Information Security, Computer Science, Intelligence Studies, Cyber Security or a related field of study, and a minimum of fifteen (15) years performing technical cyber threat intelligence analysis; thirteen (13) years of professional experience with a Master’s degree in the above fields; ten (10) years of professional experience with a related PhD/JD; 23+ years of related professional experience without a degree</li>
<li>Strong knowledge of general intelligence analysis principles governing the collection and evaluation of raw intelligence as well as the production and publication of finished intelligence</li>
<li>Strong knowledge of all-source intelligence and analysis processes, and the ability to correlate data and research using open source repositories (ex. VirusTotal, DomainTools, ThreatMiner, etc.)</li>
<li>Strong ability to provide analysis supporting assessments of the overall impact of data loss on current and future USAF weapons programs, scientific and research projects, and warfighting capabilities (in accordance with guidance as set forth in Air Force Instruction 33-200)</li>
<li>Strong knowledge of Cyber Threat Intelligence (CTI) principles to include indicators of compromise (IOC) types, indicator pivoting and indicator attribution strength</li>
<li>Strong understanding of US Intelligence Community and how cyber intelligence organizations work together for purposes of conducting cyber threat analysis</li>
<li>Strong proficiency in intelligence report writing for DoD and USIC consumers</li>
<li>Intermediate ability to present technical information and analysis to groups (Candidate will be required to brief up to 50 persons on a quarterly basis and smaller groups of up to 10 persons on a weekly basis)</li>
<li>Strong ability to conduct Incident Report Analysis on incidents reported under applicable DFARS procedures</li>
<li>Familiarity with DoD Damage Assessment Management Office (DAMO) Program guiding documents and mission (DFARS Procedures, Guidance, and Information (PGI) 204.7303-4 DoD damage assessment activities)</li>
<li>Strong familiarity with threats and vulnerabilities to supply chain, and a deep understanding of the damage assessment process, specifically regarding data compromised as a result of adversary intrusions into contractor networks</li>
<li>Apply formal intelligence analysis methods, develop hypotheses, prove/disprove relationships, question actions and motives, defend your analysis, and apply attribution to cyber threat activity. Candidate must be able to make confidence-based assessments for purposes of attribution based on their technical analysis of network traffic, multi-source data, malware and system forensic analysis. Candidate must be able to identify and avoid analytic bias.</li>
<li>Self-starter with the ability to proactively engage and develop relationships with intrusion set subject matter experts and analyst counterparts across the US Intelligence and Law Enforcement communities</li>
</ul>
Desired Qualifications:
<ul>
<li>Background supporting USAF or DoD intelligence analysis components</li>
<li>Subject Matter Expert of Advanced Persistent Threat activity</li>
<li>Formal training as an intelligence analyst in any discipline – graduate of US Government intelligence analysis course: CAC, IBC, Kent School, IC 101, Analysis 101, Army, Navy, Air Force, etc.</li>
<li>Certifications (any): CISSP, CEH, Security+, SANS certification(s), Network+, CCNA</li>
<li>Advanced Data Visualization proficiency leveraging COTS/GOTS tools</li>
<li>Any type of cyber-related law enforcement or counter-intelligence experience</li>
<li>Analyst experience in a Federal Cyber Center or corporate computer incident response team</li>
<li>CI polygraph referred, but not necessary to start</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements – US CITIZENSHIP REQUIRED.

Linthicum Heights

Cyber Threat Analyst

XOR Security is a leading provider of cyber solutions, services and support to Military Forces, Intelligence Agencies and Federal Civilian customers. Focused on computer network defense operations, we design, develop and assure a broad range of systems for sustainment of mission critical requirements, and homeland security. In support of these ongoing efforts, XOR Security is actively seeking a Junior IA Analyst.
Required Qualifications:
<ul>
<li>Provides technical and programmatic Information Assurance services in support of DC3 network and information security systems utilizing tools such as ACAS, FireEye, HBSS, PaloAlto, SCCM, SCOM, SolarWinds, Splunk, and Tanium.  </li>
<li>Designs, develops and implements security requirements within DC3 business processes.  </li>
<li>Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.</li>
<li>Prepares documentation in accordance with the NIST Risk Management Framework (RMF) in order to maintain ATOs for identified networks and IT including DEN, SDEN, DC3ON, DIBLAN.  Prepares Security Test and Evaluation plans.  </li>
<li>Provides certification and accreditation assessment and authorization (A&amp;A) support for the development of security and contingency plans and conducts complex risk and vulnerability assessments.</li>
<li>Evaluates products and recommends system enhancements to improve security deficiencies.  </li>
<li>Develops, tests and integrates computer and network security tools.</li>
<li>Secures system configurations, installs security tools, scans systems in order to determine compliancy, and reports results. Conducts security program audits and develops solutions to mitigate identified risks.  Evaluates, develops, and enhances security requirements, policy and tools.  </li>
<li>Provides assistance in computer incident investigations.  </li>
<li>Performs vulnerability assessments including development of risk mitigation strategies. </li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including paid health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and CI polygraph - Applicants must meet eligibility requirements – US CITIZENSHIP REQUIRED and a TOP SECRET Clearance!

Junior Information Security Analyst

XOR Security is currently seeking a talented Information Assurance Analyst to support one of our premier clients within the Department of Defense for the Defense Cyber Crimes Center (DC3). The DC3 program provides comprehensive Forensic, Malware Analysis and Reverse Engineering support across the Defense enterprise by providing deep analysis of potential threat activity targeting the critical DOD assets.  To support this vital mission, XOR staff is on the forefront of providing full spectrum Media Analysis, and Systems Engineering support to include the development of advanced tools and analysis techniques to protect critical DoD assets from hostile adversaries. The Information Assurance Manager will be responsible for preparing documentation such as Risk Assessment Reports (RARs) for the ISSM/CISO, System Security Plans (SSPs), Development of Plan of Action &amp; Milestones (POA&amp;Ms) to ensure compliance with Government and DC3 Cybersecurity policies and procedures. Will assist the ISSM/ISSO with the generation of cybersecurity documentation for system hardware and software assessments; assess the performance of IA Security controls for assess and authorize and assess only networks.
Top Secret clearance required. Must be eligible to obtain SCI
Strong written and verbal communications skills are a must.
Preferred Skills:
Required Qualifications:
<ul>
<li>Experience reviewing SIEM, Splunk, ACAS, Tanium for setup and compliance</li>
<li>Demonstrated Risk Management Framework (RMF) experience</li>
<li>Experience with IA/Cybersecurity policy implementation</li>
<li>Experience handling Federal C&amp;A activities to include experience with eMASS (submission, validation and updates as needed)</li>
<li>Experience performing computer systems security risk analysis and assessment.</li>
<li>Experience implementing and validating Security Technical Implementation Guidance (STIG) and Security Requirements Guidance (SRG) for applications, familiarity with DOD network architecture and network engineering practices, hardening Windows/LINUX operating system</li>
<li>DOD 8570/8140 Certification: (CISSP, CISM, GSLC, CASP, CAP)</li>
<li>DoD SCCVI, HBSS, ACAS and CMRS experience</li>
<li>TS Clearance with ability to obtain SCI</li>
</ul>
Desired Qualifications:
<ul>
<li>Experience with Department of Defense Test &amp; Evaluation (T&amp;E) practices for Cybersecurity to include validation of Security Control Requirements, STIG/SRG/Customer Centric requirements and document findings in a formalized reporting format.</li>
<li>Experience analyzing and defining security requirements.</li>
<li>Strong analytical and organizational skills with excellent communication skills (written and verbal communications) and have the ability to work in a dynamic work environment.</li>
<li>FISMA experience</li>
<li>Exceptional communication, interpersonal, problem solving, analytical and organizational skills.</li>
<li>Ability to work well both independently and as part of a team.</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - TOP SECRET CLEARANCE REQUIRED.

Information Security Analyst

Job Description: 
XOR Security is currently seeking several Mid Penetration Tester to support an Agency-level SOC program. The position will lead the analysts that will conduct ongoing enterprise-level penetration testing.  To support this vital mission, XOR staff are on the forefront of providing Advanced Cyber Network Defense Operations support to include the development of advanced analytics and countermeasures to protect critical assets from hostile adversaries. To ensure the integrity, security, and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, threat analysis, continuous monitoring, vulnerability assessment, and penetration testing.  Candidates must have leadership experience, strong written and verbal communications skills, researching and analysis skills, and attention to detail. The ideal candidate will have a solid understanding of operating system and application vulnerabilities, exploits, technical report writing, and hands-on experience conducting enterprise-level penetration testing. 
Job Duties: 
<ul>
<li>Schedule and conduct web application, database, operating system, and wireless vulnerability assessments and support penetration testing efforts. </li>
<li>Develop and review analysis reports resulting from vulnerability assessments and penetration testing. </li>
<li>Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and vulnerabilities. </li>
<li>Identify security gaps, evaluate and implement enhancements. </li>
<li>Stay up to date with current vulnerabilities, attacks, and countermeasures and provide a detailed analysis of enterprise risks, compensating controls, and risk mitigation plans. </li>
</ul>
<ul>
<li>Collaborate on problem management and root cause analysis discussions with fellow network engineers, security engineers, and analysts. </li>
<li>Identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment. </li>
</ul>
Required Qualifications: 
<ul>
<li>Top Secret Clearance</li>
<li>A minimum of 7 years of experience with assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, forensics analysis techniques, malware analysis, attack surface comprehension, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations and research, identification, and verification of new APT TTPs. </li>
<li>Experience with any of the tools listed below:  Kali Linux, Metasploit, Burp suite, Cobalt Strike, Tenable Nessus, Web Inspect, Scuba, Appdetective. </li>
</ul>
<ul>
<li>Bachelor’s Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering. </li>
<li>Knowledge and experience in Penetration Testing, SOC support, and coordination with security teams to strengthen the overall security posture in addition to developing mitigations, including signature development and working with incident management teams to better design and implement signatures and response policies and procedures. </li>
<li>Able to generate threat intelligence indicators during the course of Threat Emulation operations and apply/fine tune them across the enterprise network. </li>
<li>Research and remain up to date with emerging threats and Threat Emulation methodologies. </li>
<li>Able to automate tasks and script at a basic level. </li>
</ul>
<ul>
<li>Familiarity with NIST and FISMA compliance. </li>
<li>Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting </li>
<li>Experience with Application Security implementation, understanding of Firewall Management and Advanced Threat Protection, familiarity with Access Control, Authorization, Intrusion Prevention and Intrusion Detection, familiar with Protocol Analysis and requirements when handling sensitive and classified Information, familiar with FISMA compliance and Risk Management Framework. </li>
<li>Strong analytical and technical skills in conducting vulnerability assessments, conduct troubleshooting of failed scans, as well as abilities and prior experience with analyzing vulnerability reports from enterprise assessment tools. </li>
<li>Ability to assess large-scale reporting, analyze trends, and provide contextual reporting to senior management and system owners. </li>
</ul>
<ul>
<li>Excellent organizational and attention to detail in tracking and reporting compliance activity and trend analysis of enterprise vulnerabilities. </li>
<li>A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.). </li>
</ul>
Desired Qualifications: 
<ul>
<li>One or more certifications for VAT Analysts:  GPEN, GWAPT, GSNA, GMON, GISF, GAWN, GWEB, GXPN, CEH, GNFA, OSCP, OSEE, OSCE, OSWP, CISSP </li>
<li>Experience developing custom exploits and exploitation tools in support of authorized penetration tests or cyber threat emulation exercises. </li>
</ul>
<ul>
<li>Experience with analyzing deceptive technologies such as honeynets. </li>
<li>Ability to work with a cyber network defense organization to improve an organization’s detection capabilities. </li>
<li>Expertise in policies, industry trends, techniques related to penetration testing. </li>
<li>Existing Subject Matter Expert of Advanced Persistent Threat or Emerging Threats </li>
</ul>
Closing Statement: 
XOR Security offers a very competitive benefits package including paid health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits. 
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V. 
Citizenship Clearance Requirement Applicants selected may be subject to a government security investigation - Applicants must meet eligibility requirements – US CITIZENSHIP REQUIRED.

Mid - Penetration Tester

Job Description: 
XOR Security is currently seeking several Penetration Tester to support an Agency-level SOC program. The position will lead the analysts that will conduct ongoing enterprise-level penetration testing.  To support this vital mission, XOR staff are on the forefront of providing Advanced Cyber Network Defense Operations support to include the development of advanced analytics and countermeasures to protect critical assets from hostile adversaries. To ensure the integrity, security, and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, threat analysis, continuous monitoring, vulnerability assessment, and penetration testing.  Candidates must have leadership experience, strong written and verbal communications skills, researching and analysis skills, and attention to detail. The ideal candidate will have a solid understanding of operating system and application vulnerabilities, exploits, technical report writing, and hands-on experience conducting enterprise-level penetration testing. 
Job Duties: 
<ul>
<li>Schedule and conduct web application, database, operating system, and wireless vulnerability assessments and support penetration testing efforts. </li>
<li>Develop and review analysis reports resulting from vulnerability assessments and penetration testing. </li>
<li>Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and vulnerabilities. </li>
<li>Identify security gaps, evaluate and implement enhancements. </li>
<li>Stay up to date with current vulnerabilities, attacks, and countermeasures and provide a detailed analysis of enterprise risks, compensating controls, and risk mitigation plans. </li>
</ul>
<ul>
<li>Collaborate on problem management and root cause analysis discussions with fellow network engineers, security engineers, and analysts. </li>
<li>Identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment. </li>
</ul>
Required Qualifications: 
<ul>
<li>Top Secret Clearance</li>
<li>A minimum of 7 years of experience with assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, forensics analysis techniques, malware analysis, attack surface comprehension, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations and research, identification, and verification of new APT TTPs. </li>
<li>Experience with any of the tools listed below:  Kali Linux, Metasploit, Burp suite, Cobalt Strike, Tenable Nessus, Web Inspect, Scuba, Appdetective. </li>
</ul>
<ul>
<li>Bachelor’s Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering. </li>
<li>Knowledge and experience in Penetration Testing, SOC support, and coordination with security teams to strengthen the overall security posture in addition to developing mitigations, including signature development and working with incident management teams to better design and implement signatures and response policies and procedures. </li>
<li>Able to generate threat intelligence indicators during the course of Threat Emulation operations and apply/fine tune them across the enterprise network. </li>
<li>Research and remain up to date with emerging threats and Threat Emulation methodologies. </li>
<li>Able to automate tasks and script at a basic level. </li>
</ul>
<ul>
<li>Familiarity with NIST and FISMA compliance. </li>
<li>Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting </li>
<li>Experience with Application Security implementation, understanding of Firewall Management and Advanced Threat Protection, familiarity with Access Control, Authorization, Intrusion Prevention and Intrusion Detection, familiar with Protocol Analysis and requirements when handling sensitive and classified Information, familiar with FISMA compliance and Risk Management Framework. </li>
<li>Strong analytical and technical skills in conducting vulnerability assessments, conduct troubleshooting of failed scans, as well as abilities and prior experience with analyzing vulnerability reports from enterprise assessment tools. </li>
<li>Ability to assess large-scale reporting, analyze trends, and provide contextual reporting to senior management and system owners. </li>
</ul>
<ul>
<li>Excellent organizational and attention to detail in tracking and reporting compliance activity and trend analysis of enterprise vulnerabilities. </li>
<li>A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.). </li>
</ul>
Desired Qualifications: 
<ul>
<li>One or more certifications for VAT Analysts:  GPEN, GWAPT, GSNA, GMON, GISF, GAWN, GWEB, GXPN, CEH, GNFA, OSCP, OSEE, OSCE, OSWP, CISSP </li>
<li>Experience developing custom exploits and exploitation tools in support of authorized penetration tests or cyber threat emulation exercises. </li>
</ul>
<ul>
<li>Experience with analyzing deceptive technologies such as honeynets. </li>
<li>Ability to work with a cyber network defense organization to improve an organization’s detection capabilities. </li>
<li>Expertise in policies, industry trends, techniques related to penetration testing. </li>
<li>Existing Subject Matter Expert of Advanced Persistent Threat or Emerging Threats </li>
</ul>
Closing Statement: 
XOR Security offers a very competitive benefits package including paid health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits. 
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V. 
Citizenship Clearance Requirement Applicants selected may be subject to a government security investigation - Applicants must meet eligibility requirements – US CITIZENSHIP REQUIRED.

Senior Penetration Tester

Apply to Cyber Security Jobs in Linthicum Heights in companies remotely and near you. New Cyber Security Jobs in Linthicum Heights added daily.

Job Position and Company	Location	Tags	Posted
Cyber Threat Analyst at XOR Security	Full Time Forensic Analyst Incident Response Consulting
Junior Information Security Analyst at XOR Security	Full Time Analyst
Information Security Analyst at XOR Security	Full Time CISM CISO Forensic Analyst
Mid - Penetration Tester at XOR Security	Full Time Application Security Windows
Senior Penetration Tester at XOR Security	Full Time Application Security Windows

Cyber Security Jobs in Linthicum Heights

0 Cyber Security Jobs in Linthicum Heights. Page 1 of 1

5 closed cyber security jobs in linthicum heights:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Linthicum Heights

0 Cyber Security Jobs in Linthicum Heights. Page 1 of 1

5 closed cyber security jobs in linthicum heights:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter