Cybersecurity Analyst | Information Security

How you will contribute to revolutionizing electric aviation:

• Own one or more functions of BETA’s Information Security Operations program, support the others
• Triage findings from BETA’s SOC and other sensors, owning resolution where possible and documenting/tracking resolution by others where needed
• Document and track remediation of vulnerabilities and security-relevant misconfigurations, leading periodic reviews with operators of affected assets to guide resolution
• Respond to information security incidents throughout BETA’s information environment as a member of our Incident Response Team (IRT)
• Develop, maintain, and enhance the resources supporting training- and execution of BETA’s Information Security Incident Response Protocol (IRP)
• Train and exercise the IRP with Team Members who will staff the IRT
• Collaborate closely with other Digital Infrastructure staff to maximize alignment between security- and operational incident response
• Contribute reporting to inform periodic (monthly, annual, etc.) enterprise security posture reviews
• Support audits throughout BETA’s information environment by producing required artifacts
• Cross-train with other BETA’s Cybersecurity Analysts and understand their workflows sufficiently to provide coverage in the event of their absence

Minimum Qualifications:

• Strong understanding of information security/cybersecurity first principles
• Professional experience in an information security/cybersecurity role: continuous monitoring or incident response
• Strong teamwork orientation
• Aptitude for organizing information for others to access
• Aptitude for training others
• Excellent written and verbal communication
• Strong sense of initiative

Above and Beyond Qualifications:

• Demonstrated ability to interpret security information for non-practitioners
• Experience developing- and delivering training in a professional setting, both in-person and online
• Experience with risk-based vulnerability management
• Experience with malware analysis and response
• Experience securing IoT/ICS assets
• Experience leading information security/cybersecurity incident response
• Experience developing incident response plans or emergency management plans
• Enthusiasm for training responders through exercises
• Experience collecting data in support of reporting via web services APIs
• Academic degree in information security/cybersecurity, SANS GIAC certification (DFIR track, Cyber Defense track) or equivalent, NIMS Incident Command System certification or similar

Physical Demands and Work Environment:

• This role consists primarily of computer work and presentations to small groups in an office environment