• Analyze logs, monitoring data, and security tool outputs

• Review access logs, privilege usage, and administrative activities

• Evaluate systems administration practices and operational procedures

• Conduct or support vulnerability assessments and penetration testing efforts

• Analyze identity and access management (IAM) configurations to identify:

• Misconfigurations

• Excessive privileges

• Anomalous activity

• Validate effectiveness of implemented security controls

• Document detailed findings, evidence, and recommendations

• Support development of assessment reports and provide quality review

• 5–8 years of experience in cybersecurity analysis, SOC operations, or assessments

• Experience with IAM, logging/monitoring tools, and threat analysis

Core Certifications:

• CISSP (or Associate of CISSP)

• GIAC GSEC or GCIH

Operational / Analysis:

• CompTIA CySA+ (Cybersecurity Analyst)

• GIAC GCIA (Intrusion Analysis)

• MITRE ATT&CK certifications

Cloud/IAM (Preferred):

• AWS Certified Security – Specialty

• Azure/AWS IAM-specific training/certs

Clearance Requirement:

• Active TS/SCI with SCI Polygraph (or eligible)