Cyber Defense Specialist: SOC & Threat Analysis

Colsa; Northern (KY); Hybrid; USD 139,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

401(k) with company match

Paid time off

Job summary

COLSA is seeking a Local Defender - Cybersecurity, combining SOC Analyst and Threat Analyst duties. The role focuses on monitoring security events, analyzing incidents, and implementing CTO directives for a government customer. It requires a DoD clearance, Security+ certification, and extensive SOC experience.

The position is on-site, with occasional on-call duties for critical incidents. A Bachelor’s degree in a related field and travel flexibility are preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent).
• 12+ years in related field, including 2+ years in SOC/cybersecurity.
• Must have CompTIA Security+ or equivalent (DOD 8140 IAT Level II).
• Active DoD Secret Clearance with ability to obtain Top Secret; US citizenship required.
• Proficient in analyzing security events, logs, and alerts from SIEM, firewalls, IDS/IPS.
• Familiarity with CVEs, threat intel, MITRE ATT&CK, and vulnerability management.
• Knowledge of NETCOM CTOs and cybersecurity compliance.
• Travel may be required (CONUS/OCONUS).

Responsibilities

• Monitor and analyze security events from SIEM, firewalls, IDS/IPS and EDR tools.
• Perform basic system administration on sensor capability systems as needed.
• Analyze OT sensor data for patterns and health of systems.
• Investigate and scope security incidents; recommend remediation.
• Triage incidents and determine root causes for mitigation.
• Review SIEM reports to identify patterns and vulnerabilities.
• Develop actionable mitigation strategies from SIEM data.
• Escalate issues with detailed incident summaries to leadership.

Skills

Threat analysis

SIEM analysis

Security incident escalation

Documentation

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

CompTIA Security+

Python

PowerShell

Job description

COLSA is seeking a Local Defender - Cybersecurity, combining SOC Analyst and Threat Analyst duties. The role focuses on monitoring security events, analyzing incidents, and implementing CTO directives for a government customer. It requires a DoD clearance, Security+ certification, and extensive SOC experience.

The position is on-site, with occasional on-call duties for critical incidents. A Bachelor’s degree in a related field and travel flexibility are preferred.