Cyber Security Analyst | Graduate
Denver, Colorado, United States
● Networking - OSI & TCP/IP Models, Hardware, Routing, Protocols, Encapsulation, Framing, NAT Networks, VLANs ● Network Security - Wireshark & Wireshark Filters, Port Forwarding, VPNs, Port Scanning, Bind & Reverse Shells, IDS/IPS, Firewalls and WAFs, Rule Writing, Vulnerability Management, MITM Attacks, DNS Security ● Logs and Detection - SIEMs (Splunk), Indicators of Compromise (IoC’s), Log Types, Databases, Normalization, Regular Expressions (RegEX), Hunting, Alarms & Reports, Investigations, User and Process Monitoring● Governance, Risk and Compliance (GRC) - Frameworks, Tools, Artifacts (Strategy, Policies, Standards, Guidelines and Procedures), Risk Management, Business Continuity, Incident Response; Plans and policies concerning GRC requirements including ISO 27001, HIPAA, PCI-DSS, NIST 800-53, FedRAMP, Cyber Kill Chain, and FISMA● Threat Hunting - Threat identification, Surveillance, Data and Tracking● Threat Intelligence - Knowledge and identification of Threat Actors including APT’s. Cyber Threat Intelligence (CTI) Sources and Methods, Social Engineering, CTI Cycle and Process, Cyber Kill Chain, CTI Diamond Model, Cyber Mission Analysis ● Security Assessment - CIA (Confidentiality, integrity and availability), RMF, Risk Management Principles, Risk Assessment and Analysis, Security Metrics, Performance Measures ● Strategy and Analysis - Strategic Planning, Leadership, Operational Design, Decision Making Cycle ● Systems Administration - Windows, Unix/Linux, VMs, Memory, Storage, Python, Cloud ● Systems Security - OWASP Secure Coding Practices, Input Validation, Session Management, Encoding, Debugging, Buffer Overflows, Hypervisors
