Who we are:
ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.
The Perks:
As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.
Who we’re looking for:
We are seeking a Security Operations Center (SOC) Analyst to monitor and analyze potential cybersecurity threats and support security operations across enterprise systems and networks. This role performs security event monitoring, vulnerability scanning, configuration assessments and security tool administration to help identify risks and support remediation efforts. The SOC Analyst position requires experience in cybersecurity operations, security monitoring technologies and vulnerability management within a consulting environment. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.
What you’ll be doing:
- Monitor and analyze potential threat activity, identify security events and incidents using Security Information and Event Management (SIEM) tools and assess the effectiveness of existing security measures.
- Provide real-time alerting and monitoring by capturing, indexing and correlating security data to generate graphs, reports, alerts and visualizations, produce metrics and diagnose security problems.
- Provide engineering support, operations and maintenance for security tools, including routine Tenable Security Center administration of user accounts, scan policies and reports.
- Conduct daily and ad hoc vulnerability scans of networks and systems, track and verify findings and promote timely remediation or coordinate extension requests with stakeholders.
- Conduct Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) baseline configuration scans of hardware and network devices, including manual review of Category I and Category II findings that cannot be checked through automated scans.
- Monitor incoming security events and maintain audit log management using Splunk.
- Prepare vulnerability management metrics reports for senior leadership to communicate network security status and participate in weekly operations and maintenance meetings to discuss vulnerability patch management.
- Validate hardware and software inventories across a portfolio of systems and use advanced analytics to identify emerging threat patterns and vulnerabilities.
- Provide technical support for vulnerability assessments, risk assessments, network security, product evaluations and security implementation.
- Conduct technical evaluations of customer systems, assist with security improvements and recommend products, technologies and upgrades to strengthen security posture.
- Conduct security testing and audit log reviews.
What you need to know:
- Cybersecurity tools, including Splunk Enterprise Security, Q-Audit ICS-500-27 Splunk application, Tenable Nessus Security Center, Cylance, ExtraHop and Burp Suite, or equivalent tools
Must have’s:
- Bachelor’s degree from an accredited university, preferably in an IT related field.
- One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), CompTIA Security+ or Certified Authorization Professional (CAP).
- 5+ years of information technology, cybersecurity experience for a consulting organization, including skills and responsibilities relative to the SOC role.
- Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
- Applicants must hold and maintain an active Secret clearance.
Beneficial to have:
- Previous DOJ experience.
- Military experience.
Where it’s done:
- Onsite (Denver, CO or Crystal City, VA).
