24/7 Security Analyst - SIEM Investigator (On-Site)

Take2 Consulting, LLC; Herndon (VA); On-site; USD 70,000 - 100,000; Full time

Job summary

Take2 Consulting, LLC seeks a Security Analyst to monitor TSA SIEM events in Chantilly/Herndon, 24x7, and investigate incidents. You will document findings and coordinate with ticket systems to track investigations, supporting critical national security operations.

The role requires a Bachelor's degree, Security+ certification, and hands-on experience with SIEM tools like Splunk/CrowdStrike, plus SOC environment work. On-site duties at Chantilly/Herndon with a dynamic team are expected.

Qualifications

• 1 year of cybersecurity experience required.
• Proficiency with Splunk, Trellix or CrowdStrike in SOC operations.
• Experience with SIEM platforms and security monitoring.
• Bachelor's Degree in related field or equivalent experience.
• Minimum Security+ certification.

Responsibilities

• Monitor and analyze security events and alerts from the TSA SIEM 24x7 to identify malicious activity.
• Investigate security incidents, discern legitimate threats, and document findings.
• Work with ticket management systems to track security investigations and incident reports.
• Monitor the operational status of security components and escalate outages as necessary.
• Analyze security event logs from Windows, macOS, and Linux.
• Review network communications and routing protocols to identify anomalies or malicious activities.
• Implement counter-measures and mitigation controls within enterprise networks to enhance security.

Skills

Cybersecurity experience

SOC experience

SIEM proficiency

Analytical skills

Education

Bachelor's Degree

Tools

Splunk

Trellix

CrowdStrike

Elastic

Sentinel

Windows Active Directory

Job description

Take2 Consulting, LLC seeks a Security Analyst to monitor TSA SIEM events in Chantilly/Herndon, 24x7, and investigate incidents. You will document findings and coordinate with ticket systems to track investigations, supporting critical national security operations.

The role requires a Bachelor's degree, Security+ certification, and hands-on experience with SIEM tools like Splunk/CrowdStrike, plus SOC environment work. On-site duties at Chantilly/Herndon with a dynamic team are expected.