Cyber Auditor - Full Performance (government)

AT&T AT&T · Telecom · Fairfax, VA

The Cyber Auditor role supports the Global Network Operation Center in providing cyber defense support and vulnerability scanning. Responsibilities include monitoring security tools, assessing threats and risks, providing vulnerability scans and reports, determining risks, providing mitigation strategies, and following incident reporting procedures. Requires TSSCI with poly clearance and 7 years of applicable experience, with specific certifications preferred.

What you'd actually do

  1. Monitors security tools, assesses threats, and risks involving client infrastructure.
  2. Provides vulnerability scans, reports, and metrics to Security, Program, and Customer management.
  3. Helps determine current risks, provides mitigations strategies, and communicates with system owners, data owners, and security management to ensure risks are appropriately identified and mitigated within operational schedules.
  4. Follows standard operating procedures for detecting, classifying, and reporting incidents under the supervision of the SOC Manager and in partnership with Tier 3 SOC Analysts.

Skills

Required

  • vulnerability scanners
  • report generation
  • effective communication with leadership
  • Security+
  • CEH
  • GCIA
  • CISSP

Nice to have

  • technical writing
  • Security and Incident Event Management (SIEM) technologies
  • Intrusion Detection/Prevention Systems (IDS/IPS)
  • host-based intrusion detection systems (HIDS)
  • network mapping
  • Linux
  • Demonstrated ability to quickly obtain working knowledge of a new cyber security technology

What the JD emphasized

  • Requires office presence of a minimum of 5 days per week
  • TSSCI with poly
  • Must have (or complete within 90 days of hire) one of the following certifications: Security+, CEH, GCIA, CISSP or similar
  • Candidate must have a total of 7 years of applicable experience.