SOC Analyst I

Responsibilities

• Provide Tier I Cybersecurity Support in a SOC Environment
• Track and report cyber security threats, events, and incidents
• Perform threat analysis and investigate security incidents
• Identify the source of incidents, determine scope, and assess impact
• Implement initial response and containment measures
• Escalate incidents to higher tiers if necessary
• Report to the Incident Handler Principle and work closely with other personnel
• Create, update, and resolve incident tickets
• Create new incident tickets for escalated alerts
• Identify, capture, contain, and report malware
• Utilize SOC standard operating procedures (SOP) to perform daily tasks
• Perform damage assessments, secure network communications, and use security event correlation
• Review alerts and events from various SOC sensors
• Manage and configure security monitoring tools
• Assist with incident response design for cloud service models

Qualifications

• Must be a U.S. Citizen
• Must hold an active DOW Interim Secret or Secret Clearance
• Must hold at least one certification as required by Dept. of War (DoW) 8570.01-M and Department of War Directive 8140.01, IAT Level II or Higher OR have the ability to obtain within 6 months of hire
• Must have at least one of the following certifications or have the ability to obtain within 6 months of hire: CompTIA CySA+, EC-Council CEH, GIAC GCIA, Microsoft AZ 900, Palo Alto Networks PCCET, or Splunk Core Certified Advanced Power User
• Must have a minimum of one (1) year of professional experience in networking, UNIX/Linux system administration, software engineering, or software development
• Will accept a bachelor’s degree in computer science, engineering, information technology, cybersecurity, or related field in place of the 1 year of experience
• Knowledge of or experience with computer networking concepts, OSI model, and network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services, and network security
• Experience with host/network access control mechanisms (e.g., access control list, capabilities lists)
• Network traffic analysis methods and packet-level Cyber threats and vulnerabilities; cyber-attack stages, classes of attacks and attackers; cyber defense and information security policies, procedures, and Incident response and handling methodologies, incident categories, and timelines for Intrusion detection methodologies and techniques for detecting host and network-based intrusions
• Malware analysis concepts and methodologies
• System administration, network, and operating system hardening techniques as well as data backup
• Proficient in at least one programming language
• Working understanding of computer forensic techniques and methodologies

Pay

The salary range for this position is USD $38.72/Hr. - USD $40/Hr. Actual compensation will be determined based on several factors permitted by law.

Benefits

• Healthcare benefits
• Paid leave
• Retail plans
• Insurance programs
• Education and training assistance

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status