Junior Network Security Operations Center (NSOC) Analyst

The Informatics Applications Group; Arlington (VA); On-site; USD 75,000 - 90,000; Full time

Job summary

TIAG is seeking a Junior NSOC Analyst to support the Office of Naval Research in Arlington, VA. This 100% onsite role involves monitoring security events, triaging alerts, and contributing to incident response and vulnerability management.

You will work with senior NSOC staff and IT operations, using Trellix, Splunk, MDE, and other tools, while aligning with NIST/DoD requirements and pursuing IAT II credentials.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Information Systems, or related technical discipline.
• 1–3 years of experience in cybersecurity, information assurance, security operations, or related field.
• Basic understanding of security monitoring, incident response, vulnerability management, network and endpoint security.
• Familiarity with SIEM technologies (Trellix ESM/SIEM or Splunk) and EDR tools (MDE, Trellix).
• Knowledge of vulnerability scanning (Tenable/ACAS/Nessus) and DoD/NIST guidelines.

Responsibilities

• Monitors security events and network activity using SIEM and security monitoring tools.
• Assists with triaging alerts to identify threats, vulnerabilities, and anomalies.
• Supports threat reconnaissance and monitoring using available cybersecurity sources.
• Assists with investigating SIEM events and following Incident Response procedures.
• Maintains cybersecurity tickets and documentation in ITSM systems (ServiceNow, Azure Boards).

Skills

Analytical skills

Troubleshooting

Documentation

Communication skills

Team collaboration

Education

Bachelor's degree in Cybersecurity, IT, CS, or related field

Tools

SIEM Trellix ESM/SIEM

Splunk

Microsoft Defender for Endpoint

Trellix ePO/HBSS

Tenable/ACAS/Nessus

Job description

# Junior Network Security Operations Center (NSOC) AnalystArlington, VA 22203## OverviewSalary Range$75,000.00 - $90,000.00 Salary/yearPosition TypeFull TimeTravel PercentageNone## DescriptionTIAG is now hiring a **Junior Network Security Operations Center (NSOC) Analyst** to join our team in support of the Office of Naval Research (ONR) in Arlington, VA. Candidates must possess an active Secret Clearance or interim Secret Clearance and meet DoD IAWF IAT Level II qualifications to be considered.This is a 100% onsite position in Arlington, VA.The Junior NSOC Analyst will support ONR's Network Security Operations Center (NSOC) and work closely with senior NSOC personnel, the Information Assurance (IA)/Cybersecurity/Computer Network Defense (CND) Team, and IT Operations. The Analyst will assist with security monitoring, Security Information and Event Management (SIEM), incident identification and response, vulnerability management, network security operations, and cybersecurity compliance activities.Responsibilities:* Monitors security events, alerts, and network activity using SIEM and cybersecurity monitoring tools.* Assists with analyzing and triaging security alerts to identify potential threats, vulnerabilities, and anomalous activity.* Supports threat reconnaissance and threat monitoring activities using available cybersecurity tools and information sources.* Uses security tools and technologies such as Trellix ESM/SIEM, Trellix ePO/HBSS, Splunk, Microsoft Defender for Endpoint (MDE), SolarWinds, and Tenable/ACAS/Nessus.* Assists senior analysts with investigating SIEM events and executing established Incident Response and Incident Handling procedures.* Generates, monitors, documents, and tracks cybersecurity incidents through resolution. Escalates significant or suspicious cybersecurity events to senior NSOC analysts and appropriate Government personnel.* Assists with reviewing Indicators of Compromise (IOCs), threat intelligence, and MITRE ATT&CK information to identify potential threats within the ONR environment.* Supports the collection, correlation, and analysis of security logs from network devices, endpoints, servers, and enterprise applications.* Assists the IA team with validating system logging, log retention, and audit trail requirements in accordance with NIST and DoD requirements.* Supports continual assessment of network device configurations and assists with identifying unauthorized or rogue devices.* Assists with reviewing and validating implementation of applicable DISA Security Technical Implementation Guide (STIG) requirements.* Supports vulnerability management activities, including reviewing vulnerability scan results and coordinating remediation with technical teams.* Creates and maintains cybersecurity tickets and supporting documentation using ServiceNow, Azure Boards, and other ITSM tools.* Assists with the development and maintenance of NSOC Standard Operating Procedures (SOPs), incident response documentation, and operational processes.* Supports the development of security metrics, dashboards, reports, and trend analysis used to assess ONR's cybersecurity posture and NSOC performance.* Participates in cybersecurity incident response exercises, vulnerability remediation efforts, and other NSOC operational activities.* Coordinates with NSOC, IA, Network Operations, Systems Engineering, and other technical teams to resolve cybersecurity issues.* Continues developing technical knowledge of SIEM, Endpoint Detection and Response (EDR), vulnerability management, threat intelligence, and security automation technologies.## Qualifications* Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related technical discipline.* 1–3 years of experience in cybersecurity, information assurance, security operations, network operations, or a related technical field.* Basic understanding of cybersecurity concepts, including security monitoring, incident response, vulnerability management, network security, and endpoint security.* Experience or familiarity with SIEM technologies, such as Trellix ESM/SIEM or Splunk.* Experience or familiarity with endpoint security and Endpoint Detection and Response (EDR) technologies such as Microsoft Defender for Endpoint (MDE) or Trellix ePO/HBSS.* Familiarity with vulnerability scanning technologies such as Tenable, ACAS, or Nessus.* Familiarity with NIST cybersecurity guidance, DISA STIGs, and DoD cybersecurity requirements.* Experience or familiarity with ticketing and work management platforms such as ServiceNow or Azure Boards.* Strong analytical, troubleshooting, documentation, and communication skills.* Ability to work collaboratively with cybersecurity, infrastructure, network, and systems engineering teams. IAT Level II certification (Security+ CE or equivalent) and required Operating System (OS)/Computing Environment (CE) certification. Active Secret Clearance or interim Secret Clearance.* Preferred Qualifications Experience supporting a Security Operations Center (SOC), Network Security Operations Center (NSOC), or DoD cybersecurity environment.* Familiarity with MITRE ATT&CK, Indicators of Compromise (IOCs), threat intelligence, and security event correlation.* Exposure to Security Orchestration, Automation, and Response (SOAR) technologies.* Understanding of TCP/IP, firewalls, IDS/IPS, Access Control Lists (ACLs), endpoint security, and enterprise network architecture.* Familiarity with DoD Risk Management Framework (RMF) and cybersecurity compliance activities.* CompTIA Sec+, Computing Environment Certification* Secret security clearance