Description
We are seeking proactive defenders for a critical role safeguarding the nation's most sensitive digital landscapes as a Security Operations Center (SOC) Analyst on our 24x7 front-line security operations team.
You will be directly responsible for defending mission environments against the world's sophisticated and persistent cyber threats.
Primary Responsibilities:
- Conduct investigation and triage of security alerts from endpoints, IDS/IPS, NetFlow, and custom sensors to identify and neutralize threats within our mission spaces.
- Perform deep-dive analysis of extensive, highly-classified log files, pivoting between disparate datasets and correlating evidence to support complex incident investigations against nation-state actors.
- Produce detailed technical findings and reports for high-level stakeholders, documenting adversary tactics, techniques, and procedures (TTPs).
- Integrate and operationalize highly-classified threat intelligence feeds and Indicators of Compromise (IOCs) into security sensors and SIEM platforms.
- Collaborate closely with specialized incident response teams and ensure timely, precise communication of security incidents to mission partners.
Key Skillsets We Are Looking For:
- SOC Experience: You understand the operational flow, high tempo demands, and rigorous standards of a 24x7 Security Operations Center, particularly those operating at the highest classification levels.
- Critical Thinking & Adversary Mindset: You possess the ability to look beyond the surface of an alert to uncover the TTPs of advanced persistent threats (APTs).
- Demonstrated Self-Motivation: You are a self-starter who takes active ownership of your professional development.
- Thrives on Change: The threat landscape and tactical priorities shift constantly.
Shift & Operational Requirements:
- Predictable Work-Life Balance: To support your well-being, we utilize a predictable five-day, 8-hour shift structure.
- Shift Options to Fit Your Lifestyle: Our 24x7 mission requires continuous coverage, but it also provides the opportunity to align your work hours with your personal routine.
Required Qualifications:
- Clearance: Must have an active DoD Top Secret security clearance.
- Level I: Bachelor's degree and 2+ years of relevant experience.
- Level II: Bachelor's degree and 4+ years of relevant experience.
- Baseline Certification: Current DoD 8570 IAT Level II (or higher) certification.
- Specialized Certification: Ability to obtain a DoD 8570 CSSP-Analyst level certification within 180 days of hire.
- Technical Core: Solid foundation in networking principles, including packet analysis, common ports/protocols, traffic flow, the OSI model, and defense-in-depth architecture.
Preferred Qualifications:
- Prior experience working within a TS/SCI operational environment, DISA, or other specialized DoD agencies.
- Experience applying intelligence-driven defense strategies utilizing the MITRE ATT&CK or Cyber Kill Chain frameworks against known APT intrusion sets.
- In-depth experience utilizing SIEM/SOAR platforms to perform behavioral and statistical analysis across multiple log types within a classified network.
- Knowledge or experience in defending classified cloud environments.
- Basic scripting and programming skills to automate routine analytical tasks.
The pay range for this job is $69,550.00 - $125,725.00.