Security Operations Center Analyst

EverWatch; Maryland; On-site; USD 79,000 - 92,000; Full time

Job summary

EverWatch invites applications for a Security Operations Center Analyst in the Annapolis Junction area to strengthen U.S. Cyber Command defenses.

You will analyze logs, threat intelligence, and forensic data to identify advanced threats and respond to incidents with a deep understanding of customer networks. The role requires experience in SIEM, vulnerability scans, Linux environments, and network fundamentals, plus TS/SCI clearance with polygraph.

Qualifications

• Experience with SIEM fundamentals, including Splunk.
• Knowledge of basic networking fundamentals.
• Knowledge of Bro (Zeek) configurations.
• Knowledge of Suricata or Snort.
• Ability to review Nessus scans and Firewall configurations.
• Ability to review Linux hosts for indicators of compromise and hardening of Linux systems.
• Ability to navigate *nix based systems via CLI.
• Ability to find, read, and analyze various logs.
• TS/SCI clearance with a polygraph.
• HS diploma or GED and 6+ years of incident response experience or Bachelor's +2 years.

Responsibilities

• Analyze logs, forensic data, and threat intelligence to identify advanced threats.
• Perform threat identification and complex incident response.
• Advise on gaps to close and harden networks in collaboration with customers.

Skills

SIEM Fundamentals

Splunk

Networking basics

Linux CLI

Log analysis

Education

HS diploma or GED

Bachelor's degree

Tools

Bro (Zeek)

Suricata

Nessus

Job description

Overview

EverWatch is a government solutions company providing advanced defense, intelligence, and deployed support to our country’s most critical missions. We are a full-service government solutions company. Harnessing the most advanced technology and solutions, we strengthen defenses and control environments to preserve continuity and ensure mission success.

Job Title

Security Operations Center Analyst

Overview

EverWatch employees are focused on tackling the most difficult challenges of the US Government. We offer the best salaries and benefits packages in our industry - to identify and retain the top talent in support of our critical mission objectives.

Commitment To Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

Responsibilities

Are you ready to take a strategic role in cyber defense for U.S Cyber Command? Do you want to use your experience-based knowledge to protect critical warfighter infrastructure from the constant onslaught of cyber threats? If you want a position that uses your extensive threat analysis skills to perform advanced threat identification and complex incident response, you want to be a SOC analyst. As an analyst on our SOC team, you’ll analyze logs, forensic data, and threat intelligence to find the advanced threats that are escaping detection. Using your deep understanding of your customer’s networks, combined with your cybersecurity experience, you’ll analyze patterns to understand attackers’ goals and stop them from succeeding. Once you find the adversary in the SEIM’s blind spot, you’ll advise on ways to close the gaps and harden their network. Let’s outsmart malicious actors and protect U.S. Cyber Command. Join us. The world can’t wait.

Qualifications

You Have:

• Experience with SIEM Fundamentals, including Splunk
• Knowledge of basic networking fundamentals
• Knowledge of the basic functions and configurations of Bro (Zeek)
• Knowledge of Suricata or Snort
• Ability to review Nessus scans and Firewall configurations
• Ability to review Linux hosts for indicators of compromise and hardening of Linux systems
• Ability to navigate *nix based systems via CLI
• Ability to find, read, and analyze various logs
• TS/SCI clearance with a polygraph
• HS diploma or GED and 6+ years of experience with incident response procedures and analysis, or Bachelor's degree and 2+ years of experience with incident response procedures and analysis

Nice If You Have

• Experience with correlating threat intelligence (INTEL) to determine the threat actor, the attack's scope, and the affected systems
• Experience with AI Fundamentals
• Knowledge of Splunk Phantom or SOAR

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Compensation at EverWatch is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $57.69 to $67.30 per hour. The estimate displayed represents the typical compensation range for this position and is just one component of EverWatch’s total compensation package for employees.

Job Locations

US-MD-Annapolis Junction

Skills

cyber threat, SIEM, Networking, suricata, snort, Linux, *nix