Client is looking for a SOC Operations Analyst/Watch-Floor Operations to join our high performing cyber team in support of a large SOC enterprise environment.
Responsibilities
Responsible for monitoring computer networks for security issues. Investigating security breaches and other cybersecurity incidents. Document security breaches and assess the damage they cause. Work with the security team to perform tests and uncover network vulnerabilities, such as penetration testing. Fix detected vulnerabilities to maintain a high-security standard. Recommend best practices for IT security. Installing security measures and operating software to protect systems and information infrastructure, including firewalls and data encryption programs. Must be capable of conducting analysis, confirming intrusion information and creating a forensically sound duplicate of the files. Decrypts data and provides technical summaries and input. Examines recovered data for relevant information and performs dynamic analysis to include timeline, statistical, and file signature analysis. Performs real-time cyber defense handling tasks to support deployable Incident Response Teams (IRTs).
Required Skills:
- Clearance: Top Secret with the ability to sit for the CI Poly
- Requires BS or BA degree
- 5 years overall experience to include experience with Splunk Enterprise Security (R)
Preferred Skills:
Having the following tools experience and/or certifications:
- Microsoft Sentinel (P)
- GIAC Continuous Monitoring Certification (GMON)
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Certified Intrusion Analyst (GCIA)
- GIAC Network Forensic Analyst (GNFA)
BENEFITS
We offer a comprehensive benefit package that includes 3 weeks paid time off, 2 weeks Holiday pay, medical/dental/vision coverage, STD, LTD, Life Insurance, AD&D, and 401k with up to 4% match.
Never miss an opportunity! Create an alert based on the job you applied for.
