CIOCC Tier 1 Analyst

PlanIT Group, LLC; Rockville (MD); Presencial; USD 65.000 - 90.000; Jornada completa

Descripción de la vacante

PlanIT Group, LLC is seeking a CIOCC Tier 1 Analyst to monitor and respond to security events from SIEM and other sources. You will work on a 1st shift from 6a-4p, analyzing alerts and coordinating incident responses with the team.

Ideal candidates have 1–3 years in a SOC or relevant certifications, strong communication skills, and experience with Windows, Linux or UNIX systems, and Splunk or similar SIEM tools.

Formación

• 1–3 years in a security operations center or recent college graduate with certs.
• Experience with Windows, Linux or UNIX in a functional capacity.
• Excellent written and verbal communication; ability to explain technical details clearly.
• Splunk or similar SIEM tool.

Responsabilidades

• Analyze and respond to security events and incidents from SIEM, FW, IDS/IPS, endpoint security, NAC and other data sources.
• Communicate findings clearly to stakeholders and coordinate responses.
• Support 1st shift operations and maintain situational awareness.

Conocimientos

SOC operations

Incident response

Windows

Linux/UNIX

Communication

Splunk

Herramientas

SIEM

Descripción del empleo

Summary

The CIOCC Tier 1 Analyst shall be responsible for the following, but not limited to: Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, Network Access Control (NAC) and other client data sources

• 1-3 years of security operations center environment experience or recent college graduate with industry certifications.


• Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity


• Excellent written and verbal communication skills required. Must be able to communicate technical details clearly


• Splunk or similar SIEM tool


• MUST BE A US CITIZEN

Summary

The CIOCC Tier 1 Analyst shall be responsible for the following, but not limited to: Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, Network Access Control (NAC) and other client data sources

• 1-3 years of security operations center environment experience or recent college graduate with industry certifications.


• Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity


• Excellent written and verbal communication skills required. Must be able to communicate technical details clearly


• Splunk or similar SIEM tool


• MUST BE A US CITIZEN

Preferred

• CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. - One or more preferred


• IDS Log analysis skills


• Packet Capture tools and analysis


• Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP)


• This is for 1st shift: 6a-4p