Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats.

A Security Analyst is responsible for identifying and mitigating potential security risks, monitoring systems for vulnerabilities, investigating security incidents, and implementing measures to safeguard information and infrastructure. They play a crucial role in maintaining the integrity and confidentiality of data.

Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.