Security Operations Center Analyst

Quantum Sky; Columbia (SC); Hybrid; USD 60,000 - 95,000; Full time

Job summary

Quantum Sky is seeking a Security Operations Center (SOC) Analyst to monitor threats, analyze events, and report on security incidents across enterprise networks.

The role is hybrid with on-site presence in Columbia, SC several days a week; requires Top Secret clearance, a bachelor’s degree or equivalent, and experience with CrowdStrike, Splunk, SOAR/UBA.

Qualifications

• Bachelor’s Degree or equivalent education/experience.
• Minimum 1 year general work experience and 2 years relevant experience.
• Experience as a Security/Network Administrator.
• Experience with SOC and incident response preferred.
• Active Top Secret clearance required.

Responsibilities

• Provide support for complex computer network exploitation and defense techniques to include deterring, identifying, and investigating computer and network intrusions; providing incident response and remediation support
• Perform comprehensive computer surveillance/monitoring, identifying vulnerabilities; provide recommendations to improve security posture, and maintain the agency's incident response plan and associated artifacts
• Support cybersecurity training efforts and national security exercises, such as table-top exercises, functional exercises, and scenario-based exercises.
• Provide technical support for a comprehensive risk management program identifying mission-critical processes and systems; current and projected threats; and system vulnerabilities.

Skills

Analytical skills

Communication skills

SOC operations

Threat monitoring

Education

Bachelor’s Degree or equivalent

Tools

CrowdStrike EDR

Splunk Enterprise Security

SOAR

UBA

Job description

Quantum Sky is searching for a Security Operations Center (SOC) Analyst to support threat monitoring, detection, event analysis, and incident reporting. You will be responsible for monitoring enterprise networks and systems, detecting events, and reporting on any and all threats that are directed against those systems regardless of their classification level or type.

Typically, the client’s sensor grid acquires millions of events per day and events are analyzed and categorized in accordance with the Cyber Security Incident Response Plan. The Incident Response Analyst will provide the client with a fully comprehensive array of analytical activities in support of external threat monitoring, detection, event analysis, and incident reporting efforts including presentation reviews, internal and external threat reporting, analysis of inbound and outbound public internet traffic, suspicious e-mail messages, administering access request to specific public sites, communicating and coordinating the characterization of events and the response.

Responsibilities

• Provide support for complex computer network exploitation and defense techniques to include deterring, identifying, and investigating computer and network intrusions; providing incident response and remediation support
• Perform comprehensive computer surveillance/monitoring, identifying vulnerabilities; provide recommendations to improve security posture, and maintain the agency's incident response plan and associated artifacts
• Support cybersecurity training efforts and national security exercises, such as table-top exercises, functional exercises, and scenario-based exercises.
• Provide technical support for a comprehensive risk management program identifying mission-critical processes and systems; current and projected threats; and system vulnerabilities.

Required

• Bachelor’s Degree, or an equivalent combination of formal education, experience
• Minimum of one (3) year of general work experience and two (2) year of relevant experience
• Minimum one (1) year of experience as a Security/Network Administrator
• Experience in some of the following tools and technologies:
• CrowdStrike EDR
• Splunk Enterprise Security, SOAR, and UBA
• Strong analytical and organizational skills.
• Strong verbal and written communication skills.
• Experience with MS Word and other MS Office applications.
• Experience working in a SOC and doing incident response is preferred.
• Experience with securing various environments preferred.

Clearance

• Active Top Secret clearance required

Location

• This is a hybrid role with expectations of being on-site role in Columbia, SC a few days a week.