Cleared SecOps Analyst - TS/SCI w/ Poly

Altus Consulting Corporation; Reston (VA); Presencial; USD 120 000 - 160 000; Tempo integral

Resumo da oferta

Altus Consulting Corporation seeks mid-level SecOps Analysts to support continuous security monitoring, incident triage, investigation and response within a 24/7/365 cleared cloud Security Operations Center. You will monitor telemetry, enrich events, document findings and own incidents through escalation and closure.

This role targets disciplined security professionals with SOC, cyber defense, or incident response backgrounds, including cleared IT operations. TS/SCI required.

Qualificações

• Active TS/SCI clearance with Full Scope Polygraph is required.
• U.S. Citizenship is required.
• Three or more years in Security Operations or related fields.
• Hands-on experience with SIEM, IDS, EDR, and case-management tools.
• Experience supporting Windows and Linux environments and network infrastructure.
• Familiarity with cloud security and incident response practices.

Responsabilidades

• Continuously monitor security alerts and events using SIEM/EDR and other platforms.
• Perform initial triage, enrichment, correlation, and investigation of alerts.
• Categorize and prioritize incidents; maintain ownership through closure.
• Develop diagnostic summaries and document indicators of compromise.
• Create and maintain security cases using ticketing systems; escalate per procedures.
• Collaborate with SecOps teams to resolve security events and improve detections.

Conhecimentos

SOC operations

SIEM

EDR

Incident response

ServiceNow

Kubernetes

Python

PowerShell

Cloud security

Ferramentas

Splunk

Elastic/ELK

Google SecOps/Chronicle

Descrição da oferta de emprego

Altus Consulting Corporation seeks mid-level SecOps Analysts to support continuous security monitoring, incident triage, investigation and response within a 24/7/365 cleared cloud Security Operations Center. You will monitor telemetry, enrich events, document findings and own incidents through escalation and closure.

This role targets disciplined security professionals with SOC, cyber defense, or incident response backgrounds, including cleared IT operations. TS/SCI required.