Certifications: Commonly listed include CompTIA Security+ (analyst level baseline), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC certifications: e.g., GSEC, GCIA, GCIH, Microsoft/AWS/Azure Security Specialty (where cloud systems are in scope). While exact duties will be defined in the SOW and contract scope, common responsibilities include: Monitor, analyze, and evaluate security events from various systems (e.g., SIEM, IDS/IPS), identifying anomalies and threats in real time 1.