Security Operation Center (SOC) Analyst I

About the role

P-11 Security is a certified EDWOSB 8(a) with extensive experience in security services, specializing in SiD and providing 360 Security Services, Cyber Security, and IT solutions. We tailor our strategies to meet the unique needs of the Defense Industry Base, military installations, government agencies, and educational institutions.

Responsibilities

• Provide comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.
• Conduct security event monitoring, advanced analytics, and response activities in support of the government’s mission.
• Support activities within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, including HQ Air Force, Office of the Secretary of Defense (OSD), and Military Compartments efforts.
• Provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities.

Requirements

• Strong analytical and technical skills in computer network defense operations.
• Experience in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management), and Malware Analysis.
• Knowledgeable and hands-on experience with Security Information and Event Monitoring (SIEM) platforms and/or log management systems.
• Logical/critical thinking abilities, especially analyzing security events.
• Organizational and attention to details in tracking activities within various Security Operation workflows.
• A working knowledge of various operating systems and network communications and routing protocols.
• Experience with identifying and implementing counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.
• Experience with Network Threat Hunting, Big Data Analytics, Endpoint Threat Detection and Response, SIEM, workflow and ticketing, and Intrusion Detection System.

Qualifications

• 2-4 years related experience in roles such as ISSO or ISSM.
• Bachelor’s degree in a related area or equivalent experience (4 years).
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 2 or Information Assurance Manager Level 2 or CND Auditor or Incident Responder certification within 6 months of the date of hire.
• Current Top Secret Clearance with SCI eligibility.
• Eligibility for access to Special Access Program Information.
• Willingness to submit to a Counterintelligence polygraph.

Skills

• Develop rules, filters, views, signatures, countermeasures, and operationally relevant applications and scripts to support analysis and detection efforts.
• Research Emerging Threats and recommend monitoring content within security tools.
• Analyze NetFlow data and packet capture (PCAP).
• Understand common attack methodologies, tactics, and protocols.
• Knowledge of TCP and IP protocol suite, security architecture, DNS, and remote access security techniques and products.
• Technical experience in information security fields using a mix of security technologies such as: Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls & Log Analysis, SIEM, Network Behavior Analysis tools, Antivirus, and Network Packet Analyzers, Digital Forensics tools.

Benefits

N/A

Pay

N/A

Schedule

N/A