Remote SOC Analyst — Secret Clearance (Night Shift)

Peraton; Herndon (VA); Teletrabalho; USD 80 000 - 128 000; Tempo integral

Resumo da oferta

Peraton is seeking a SOC Analyst to support the Department of State (DOS) CAEIO program on IT operations and security operations. This remote role prefers candidates near the DMV for occasional onsite meetings in Sterling, VA or DC area.

The position follows a third shift, 11:00 PM–7:30 AM EST, Thursday to Monday, with on-site requirements fluctuating by program needs. Responsibilities include monitoring alerts, threat hunting, log review, SIEM/EDR usage, and incident reporting.

Qualificações

• 2+ years of cybersecurity, SOC, or systems security experience in a federal government environment.
• Active SECRET security clearance.
• 2+ years of SOC or cybersecurity related experience.
• Experience with a SIEM platform, preferably Splunk.
• Experience querying and analyzing security data with SPL and regex.
• Familiarity with RMF and NIST SP 800-53.

Responsabilidades

• Monitor and investigate security alerts, perform threat hunting, and notify designated managers and responders.
• Analyze and characterize network traffic to identify anomalous activity.
• Create advanced SPL queries and dashboards.
• Coordinate with teams to investigate threats, assess risks, and conduct forensics.
• Review and analyze logs from multiple sources to identify threats.
• Utilize SIEM/EDR tools to monitor the environment.
• Develop and document configuration standards, policies, and procedures.
• Mentor junior SOC team members and plan SOC projects.

Conhecimentos

Splunk

Microsoft Sentinel

Threat hunting

Incident response

Security monitoring

Forensic analysis

Scripting

Networking basics

Formação académica

Bachelor’s degree

Associate degree

High School diploma

Ferramentas

Splunk

Microsoft Sentinel

Descrição da oferta de emprego

Peraton is seeking a SOC Analyst to support the Department of State (DOS) CAEIO program on IT operations and security operations. This remote role prefers candidates near the DMV for occasional onsite meetings in Sterling, VA or DC area.

The position follows a third shift, 11:00 PM–7:30 AM EST, Thursday to Monday, with on-site requirements fluctuating by program needs. Responsibilities include monitoring alerts, threat hunting, log review, SIEM/EDR usage, and incident reporting.