Vacancy caducado!
REQ#: RQ71661
Travel Required: Less than 10% Public Trust: NACLC (T3) Requisition Type: Regular Technology Shared Services (TSS) is looking for a Tier I Security Operations Center (SOC) Analyst. As a member of the 24x7x365 TSS SOC team, the Cyber Security Analyst Associate (Tier I) will be responsible for performing initial triage and escalation of security alerts from hardware, software, intelligence sources, virtual systems and virtual applications within the SOC's diverse customer base. As a SOC Analyst, the aptitude and flexibility to quickly learn and utilize third party toolsets will be an essential part of securing our client environments.RESPONSIBILITIES: As a Tier II Security Operations Center Analyst you will:- Provide technical support on event network security logs and trend analysis.
- Detect the full spectrum of known cyberattacks (e.g., DDoS, malware, phishing, others).
- Uncover and pinpoint security violations of compromised systems and devices
- Correlate security events from various capabilities to identify attacks and breaches.
- Analyze and act on intelligence information to secure customer networks and devices
- Observe, document and report actions taken by malicious actors in customer networks.
- Maintain a current understanding of the best practices and strategies used in cyber security.
- Motivate self and co-workers to expand knowledgebase and capabilities.
- Must be a
- Associates Degree or equivalent work experience
- Interim or Active DoD Secret clearance (Or Ability to obtain)
- Must get DoD IAT Level II (8570) Certification within 6 months
- Strong analytical, organizational and project management skills
- Understanding of networking fundamentals, the OSI model, and TCP/IP protocols
- Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.)
- Experience reviewing network, host and application audit logs (system, security, etc.)
- Relevant security certifications (Network+, CEH, CCNA, etc.)
- Familiarity of security standards (NIST, FISMA, Fed RAMP, DCID, CNSS and DoD 8500)
- Knowledge of cloud IT solutions and security considerations of cloud solution deployment
- Experience with any SIEM or log aggregation system, Splunk preferred
Vacancy caducado!