Cybersecurity Analyst

Summary

American Rheinmetall is a leader in the design, development, and production of advanced tracked and wheeled vehicles. The Cybersecurity Analyst role focuses on threat intelligence, managing technologies, developing information security policies, and conducting security assessments to ensure compliance with regulatory guidelines.

Responsibilities

• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures)
• Review logs and reports of all in-place devices and interpret the implications of that activity and devise plans for an appropriate resolution
• Participate in investigations into problematic activity
• Participate in the design and execution of vulnerability assessments, penetration tests, and security audits
• Assist in ensuring that the Company is up to date with the latest security standards, patches, network protocols and products
• Recommend improvements to the current security posture
• Identify areas where controls are lacking or inadequate
• Assist in preparing the organization to respond to possible security incidents and breach
• Research security architecture, security technologies and security solutions
• Understand current infrastructure and network architecture
• Assess current security controls
• Identify operational configurations of workstations as per the established baselines and take actions to remedy misconfigurations
• Investigate potentially harmful emails and take actions to ensure that the threat is neutralized
• Identify sensitive data locations and make suggestions for safeguarding said data
• Be familiar with NIST 800-171 and the CMMC and apply standards
• Identify areas in which the company must follow NIST 800-171
• Assist in implementing or upgrading solutions pertaining to NIST compliance
• Identify areas that the company needs to improve on for the CMMC
• Assist in scheduling and leading Vulnerability Assessment meetings, Risk Assessment meetings, NIST compliance meetings, CMMC task meetings, or any other security related meetings

Skills

• Bachelor's degree in cybersecurity or related STEM field with 1-2 years related experience and/or training
• Be extremely familiar with NIST 800-171
• Must undergo and meet company standards for background check, employment verification, reference checks and controlled substance testing
• Quantity of Work - The quantity of work produced and the promptness with which it is completed
• Quality of Work - The ability displayed, and accuracy of work produced, meeting company standards, and requiring little to no rework
• Judgement/Knowledge of Job - Knowledge of job, techniques, skills, equipment, procedures, materials, etc
• Attendance/Dependability - Punctuality and attendance
• Teamwork/ Attitude - Willingness and cooperativeness with co-workers and supervisors; ability to accept constructive criticism
• Initiative/Independence - The degree to which an employee searches out new tasks and expands their ability to perform assigned tasks without direct supervision
• Basic knowledge of security risks & strategies, SIEM, antivirus, proxies, firewalls, and intrusion detection concepts, tools, and processes
• Knowledge of CMMC preferred
• Experience working with Linux Systems and cybersecurity best practices
• Experience with Fortinet equipment and security certifications such as Security+, CISSP, CEH, OSCP, etc. is desired, but not required

Qualifications

Must Haves

• Bachelor's degree in cybersecurity or related STEM field with 1-2 years related experience and/or training
• Be extremely familiar with NIST 800-171
• Must undergo and meet company standards for background check, employment verification, reference checks and controlled substance testing
• Quantity of Work - The quantity of work produced and the promptness with which it is completed
• Quality of Work - The ability displayed, and accuracy of work produced, meeting company standards, and requiring little to no rework
• Judgement/Knowledge of Job - Knowledge of job, techniques, skills, equipment, procedures, materials, etc
• Attendance/Dependability - Punctuality and attendance
• Teamwork/ Attitude - Willingness and cooperativeness with co-workers and supervisors; ability to accept constructive criticism
• Initiative/Independence - The degree to which an employee searches out new tasks and expands their ability to perform assigned tasks without direct supervision

Nice to Haves

• Basic knowledge of security risks & strategies, SIEM, antivirus, proxies, firewalls, and intrusion detection concepts, tools, and processes
• Knowledge of CMMC preferred
• Experience working with Linux Systems and cybersecurity best practices
• Experience with Fortinet equipment and security certifications such as Security+, CISSP, CEH, OSCP, etc. is desired, but not required