Cybersecurity Ops Analyst Senior

SAIC is seeking a Senior Cyber Security Analyst to join our County of Orange Security Operations Center (SOC) team. The core mission of the SOC is to protect County assets, systems, and data against cyber threats. The Tier 2 Security Analyst will create, tune, monitor, and investigate Security Information and Event Management (SIEM) alerts and assist with other SOC functions such as incident response, digital forensics, data loss prevention, and vulnerability management actions.

The SOC operates a hybrid shift model, with some days onsite in Santa Ana, CA and some days remote. Since the SOC is a 7/24/365 operations center, it is expected that this person will work during some holidays. Shift rotation is required based on operational needs; remaining on the same shift is not guaranteed, though reasonable notice will be provided prior to any shift changes.

Responsibilities

• Proactively monitor security events for networks and systems.
• Mentor and guide T1 SOC Analysts.
• Identify, investigate, and report on potential security incidents.
• Support risk and vulnerability assessment at the network, system, and application level.
• Support cyber metrics development, maintenance, and reporting.
• Support cyber threat intelligence development and reporting.
• Support routine identification, development, and implementation of automation tasks.
• Proactively develop, recommend, and implement security controls and formulate operational risk mitigations along with assisting in security awareness programs.
• Research, evaluate, and recommend new security tools, techniques, and technologies and introduce them to the enterprise in alignment with IT security strategy.
• Utilize COTS/GOTS and custom tools and processes/procedures to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions.
• Assist in the implementation of required government policy (i.e., NIST) and make recommendations on process tailoring.
• Perform analyses to validate established security requirements and recommend additional security requirements and safeguards.
• Periodically conduct a review of each system's audits and monitor corrective actions until all actions are closed.
• Routinely provide briefings to senior staff.

Requirements

• A Bachelor’s degree in a related field and 2 years of related experience required; 4 years of related experience is highly preferred. Additional experience can be substituted in lieu of education.
• Must be able to pass the LiveScan background check, CSS Department review, and Probation Department review.
• Must be able to pass a drug screen.

Qualifications

• Preferred certifications: CySA+, SecurityX+, GIAC Security Essentials (GSEC), or similar industry-related certification(s).
• Demonstrated experience in analyzing security alerts via Sentinel Security Information and Event Management (SIEM) (experience with other SIEM tools would be acceptable).
• Demonstrated response, exposure to, and partial or full ownership of security incidents.
• Demonstrated knowledge of the full Incident Response cycle: Identification, Protection, Detection, Response, Recovery.
• Adherence to Standard Operating Procedures for the SOC.

Skills

• Programming languages such as Python, C++, JavaScript.
• Security Information and Event Management (SIEM) technologies.
• IDS/IPS, Firewalls, and Anti-Virus/Anti-Malware technologies.
• Incident Response.
• Vulnerability Management.

Pay

Target salary range $40,001 - $80,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

Schedule

• Full-time, rotating shifts (including some holidays).
• Hybrid model: some days onsite in Santa Ana, CA, and some days remote.