Cyber Security Analyst (Consultant)

Information Technology Sunnyvale, California


Description

The NextNav Security Team is responsible for evolution and implementation of our global enterprise security strategy in partnership with technology leaders across the organization.

 

We are seeking a Cyber Security Analyst who is willing to grow with NextNav global security team. As a member of the NextNav security team, the Cyber Security Analyst provides the foundational skills to drive NextNav Security program. The Analyst supports NextNav’s efforts to provide a secure and compliant product environment for our clients. The Analyst will evaluate the security profiles of NextNav’s systems, applications and products via automated and manual processes.

 

The Analyst will also support other security functions as needed with the goal of protecting the confidentiality, integrity, and availability of the company’s information assets, including internal & hosted systems as well as both NextNav and customer data. These functions may include vulnerability management and incident response.

Required Skills:

The Cyber Security Analyst is expected to have competency in a variety of security tools & platforms, potentially including the management & operation of several of the following:

 

  • Performing automated application security scans.
  • Exposure of any of the AppSec & pen testing tools such as Kali Linux, Burp Suite Pro, Wireshark, Nexpose, Nessus, Tenable, Tripwire, Checkmarx, or other similar tools
  • Windows & Linux server security technologies (server AV, server hardening)
  • Cloud & Network security technologies (network IPS, firewalls, routers, security groups)
  • Virtualized, Hybrid, & Cloud environments
  • Endpoint security technologies (Host IPS, AV, endpoint firewalls, endpoint hardening)
  • Security Incident & Event Management (SIEM)
  • Incident & Vulnerability Management
  • Other security technologies (IAM, MFA, etc.)

Desired Skills:

  • Associates or Bachelor’s degree in Computer Systems, Cyber Security or similar
  • 3+ years of Cyber Security experience
  • DLP solutions
  • Encryption tools & key management
  • Creating reports & dashboards for senior management
  • Manage audit follow-ups, support & management
  • PCI, SOC 2, or other audit/compliance frameworks
  • Security frameworks & methodologies such as NIST, ISO, MITRE ATT&CK & OWASP.
  • Definition, measurement and reporting on operational KPIs
  • Privacy regulation and related general legal knowledge

Any of the following certifications would be a plus:

                      CISSP or similar

                      CEH or similar

 

 

Company Benefits: