Description
The SOC Analyst's primary function is to provide comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.
This position will conduct security event monitoring, advanced analytics and response activities in support of the government's mission.
The SOC Analyst must have a solid understanding of cyber threats and information security in the domains of TTP's, Threat Actors, Campaigns, and Observables.
Responsibilities:
- Provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
- Conduct security event monitoring, advanced analytics and response activities.
- Analyze information technology security events to discern events that qualify as legitimate security incidents.
- Implement countermeasures and conduct incident response.
- Monitor and analyze security events using Security Information and Event Management (SIEM) platforms and/or log management systems.
- Identify and implement counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.
Requirements:
- 5+ years related experience.
- Prior performance in roles such as ISSO or ISSM.
- SAP experience required.
- Bachelor's degree in a related area OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years).
- CSSP Analyst or Incident Responder certification within 6 months of hire.
- TS/SCI clearance required.
- Must be able to attain TS/SCI with CI Polygraph.
Benefits:
- Medical plan options.
- Dental plan options.
- Vision plan.
- 401(k) plan with company match.
- Paid time off plans.
- Short and long-term disability benefits.
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance.