Cybersecurity Analyst

We are seeking a motivated and skilled Cybersecurity Analyst with a minimum of 2 years of professional experience to join our cybersecurity team. The ideal candidate will be responsible for monitoring, analyzing, and responding to security incidents and threats. This position requires a proactive individual who can effectively contribute to our team's mission of safeguarding our organization's information systems against cyber threats.

The day-to-day duties typically balance proactive defense with reactive incident response:

Continuous Monitoring: Use the Microsoft tool stack: Sentinel, Purview, and Defender to monitor networks, servers, and endpoints for suspicious activity or unauthorized access.

• Incident Response: As a key member of the Incident Response team, investigate security alerts, lead the containment of breaches, and documenting the "how" and "why" of an attack to prevent recurrence.
• Vulnerability Management: Conduct regular vulnerability assessments to identify and patch system weaknesses before they can be exploited.
• Security Configuration: Confirm firewalls, data encryption programs, and antivirus software are installed per policy and are configured properly to minimize attack surfaces.
• Reporting & Compliance: Author technical reports for stakeholders and ensuring the organization meets industry-standard regulations; NIST 800-171 and CMMC L2

Desired Knowledge, Skills & Abilities

• Thorough understanding of the RMF, A&A, and ATO processes is desired.
• Certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC Security Essentials (GSEC) are a plus.
• Experienced working with cross-functional teams to include engineering, IT, and manufacturing.

Required Qualifications

• Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field.
• Minimum of 2 years of experience in cybersecurity, with a focus on incident response and threat analysis.
• Familiarity with security information and event management (SIEM) systems, intrusion detection/prevention systems(IDS/IPS), and endpoint security.
• Understanding of network protocols, operating systems, and security architectures.
• Strong analytical and problem-solving skills, with a keen eye for detail.
• Excellent communication skills, both written and verbal.
• Active DOD Secret clearance with the ability to upgrade to Top Secret with SCI eligibility.

PREFERENCE STATEMENT
Preference will be given to Calista shareholders and their descendants and to spouses of Calista shareholders, and to shareholders of other corporations created pursuant to the Alaska Native Claims Settlement Act, in accordance with Title 43 U.S. Code 1626(g).

EEO STATEMENT
Additionally, it is our policy to select, place, train and promote the most qualified individuals based upon relevant factors such as work quality, attitude and experience, so as to provide equal employment opportunity for all employees in compliance with applicable local, state and federal laws and without regard to non-work related factors such as race, color, religion/creed, sex, national origin, age, disability, marital status, veteran status, pregnancy, sexual orientation, gender identity, citizenship, genetic information, or other protected status. When applicable, our policy of non-discrimination applies to all terms and conditions of employment, including but not limited to, recruiting, hiring, training, transfer, promotion, placement, layoff, compensation, termination, reduction in force and benefits.

REASONABLE ACCOMMODATION
It is Calista and Subsidiaries' business philosophy and practice to provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities.

The statements contained in this job description are intended to describe the general content and requirements for performance of this job. It is not intended to be an exhaustive list of all job duties, responsibilities, and requirements.

This job description is not an employment agreement or contract. Management has the exclusive right to alter the scope of work within the framework of this job description at any time without prior notice.