Technical Skills:
Skill | Years/Level of Experience |
Cybersecurity Operations | 0 to 2 years |
Cybersecurity Risk Management | 0 to 2 years |
Intrusion Detection System (IDS) | 0 to 2 years |
Security Information and Event Management (SIEM) | 0 to 2 years |
Role Description:
Monitoring and analyzing network traffic, Intrusion Detection Systems (IDS), security events and logs; Prioritizing and differentiating between potential intrusion attempts and false alarms. Develop, maintain, and follow SOC Standard Operating Procedures (SOPs). Support daily and monthly situation reporting per shift. Proactively reviewing large data sets for anomalous activity. Create detective content for monitoring devices such as IDS and SIEM and advise on proactive blocks for security architecture. Creating and tracking security investigations to resolution. Composing security alert notifications and other communications. Advising incident responders in the steps to take to investigate and resolve computer security incidents. Staying up to date with current vulnerabilities, attacks, and countermeasures. This position requires the ability to work a shift schedule. The ideal candidate should be able to multitask and give equal attention to a variety of functions while under pressure.
Qualifications:
· High school diploma or GED
· Two (2) years’ experience in security
· Experience in handling incident response
· Certified Ethical Hacking (CEH) certification or CompTIA CySA+ AND (within 6 months of hire) any from the CISSP Analyst, Infrastructure
· Support, or IR from the DOD 8570 list (or other similar certifications as approved by Government)
· Secret Clearance (Active)
Education Level: Bachelor’s degree
