Hybrid SOC Analyst: Threat Detection & Incident Response

GDH; Rockville (MD); Hybrid; USD 41.000 - 47.000; Vollzeit

Zusammenfassung

GDH is seeking a Tier 1 Security Operations Analyst to monitor, analyze, and respond to cybersecurity events across multiple data sources. The role requires strong technical analysis, communication, and documentation skills and offers a hybrid work arrangement in Rockville, MD.

Responsibilities include investigating security events, maintaining incident reports, and collaborating with the security team to strengthen threat detection and operational workflows. U.S.

Qualifikationen

• 1 to 3 years of experience in a SOC or related environment, or relevant industry certifications.
• Relevant education, training, certifications, or equivalent practical experience.
• Experience with Windows, Linux, or UNIX.
• Experience with SIEM technologies such as Splunk or comparable platforms.
• Familiarity with IDS log analysis, packet capture, and network analysis tools.
• Knowledge of FTP, HTTP, SSH, and SMB protocols.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Eligibility for a U.S. Government security clearance; U.S. citizenship required.
• Ability to work in a hybrid environment in Rockville, Maryland.

Aufgaben

• Monitor, analyze, and respond to security events from SIEM, firewall, IDS/IPS, endpoint security, and NAC systems.
• Investigate security events using log analysis, packet capture tools, and network protocol analysis.
• Monitor security alerts and escalate high-risk issues according to procedures.
• Develop and maintain security documentation, incident reports, and analysis findings.
• Collaborate with security team members to improve threat detection strategies and workflows.
• Support ongoing security operations and incident response activities.
• Analyze security events to distinguish false positives from true threats.
• Follow established security standards, procedures, and best practices.
• Maintain knowledge of emerging cybersecurity threats, vulnerabilities, and security practices.
• Communicate technical findings clearly to team members and stakeholders.

Kenntnisse

Analytical thinking

Written and verbal communication

Security clearance eligibility

Ausbildung

Relevant education or certifications

Tools

Splunk

SIEM tools

Packet capture tools

Jobbeschreibung

GDH is seeking a Tier 1 Security Operations Analyst to monitor, analyze, and respond to cybersecurity events across multiple data sources. The role requires strong technical analysis, communication, and documentation skills and offers a hybrid work arrangement in Rockville, MD.

Responsibilities include investigating security events, maintaining incident reports, and collaborating with the security team to strengthen threat detection and operational workflows. U.S.