Description & Requirements
Monitor Air Gapped Security Fabrics through managed SECOPs Tools. Performing event analysis within SIEM, leveraging systems to develop response tickets within case management tooling. Troubleshoot and coordinate with TIER 2 Analysts for event escalation, and follow defined security playbooks for environments.
Responsibilities include but are not limited to:
Monitoring Operations Center IT an infrastructure for a 24x7 mission critical SECOPs function.
Drive enhanced Security Posture through detections & response compliance.
A customer first attitude is a must
Work Shift: Wed-Sun 0000-1000. Schedules are subject to change based on business needs.
Basic Qualifications:
3+ years of experience in Security Operations, Cyber Security, and/or Systems Administration.
Experience with SIEM, IDS, EDR, and Case Management Tools.
Experience with supporting operating systems, networking, scripting and automation, and Security Application troubleshooting.
An active 8140 Certification
High School Diploma or GED
Preferred Qualifications:
Bachelor's degree or equivalent practical experience.
Experience in working with SOC systems/networks.
Experience in supporting Security Detections Development
Experience with security alert tuning, in partnership with TIER 2 and TIER 3 (Engineering) Teams
Experience with creating scripts to automate common tasks.
Experience in developing Threat Reports, translating IOCs and alerts into narrative overviews.
Understanding of local and wide area networks (LAN/WAN) and mobile computing environments.
Understanding of STIG and hardening practices
Security Clearance Required:
Must have an active/current TS/SCI w/ Polygraph.
Physical Requirements:
Use hands to operate a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.
The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
Must be able to remain in a stationary position 50% of the time