Security Operations Center Analyst I

CIS; United States; Remote; USD 47,000 - 78,000; Full time

Benefits offered by this job

Health Insurance

401(k) with 4% Company Match

Paid Time Off (PTO)

Tuition Reimbursement

Bonus eligibility

Job summary

CIS in the United States seeks a SOC Analyst to join the Operations, Intelligence, and Services department, reporting to the SOC Manager. The role centers on coordinating and reporting cyber incidents affecting SLTT governments, with duties that may require extended hours during crises.

You will monitor a 24x7 SOC, analyze security events from diverse devices, and provide incident response, threat analytics, and vulnerability assessments. U.S. citizenship is required.

Qualifications

• Bachelor’s degree in a related field or equivalent demonstrated experience.
• Experience analyzing network and host-based security events.
• Knowledge of incident response life cycle and steps.
• Knowledge of TCP/IP protocols and network security applications.
• Knowledge of common Internet protocols and applications.
• U.S. citizenship required.

Responsibilities

• Work in a 24x7 Security Operation Center (SOC) environment.
• Provide analysis of network and host-based security events and trends from a large number of heterogeneous security devices.
• Provide incident response (IR) support when analysis confirms actionable incident.
• Provide threat and vulnerability analysis as well as security advisory services.
• Analyze and respond to previously undisclosed software and hardware vulnerabilities.
• Investigate, document, and report on information security issues and emerging trends.
• Coordinate with intel analysts on open-source activities impacting SLTT governments.
• Integrate and share information with other analysts and other teams.
• Other tasks and responsibilities as assigned.

Skills

Experience analyzing network and host‑

Incident response life cycle

TCP/IP protocols and network security

Common Internet protocols and apps

Education

Bachelor’s degree in a related field or equivalent demonstrated experience

Job description

The Security Operations Center (SOC) Analyst is part of the Operations, Intelligence, and Services department, which resides on the SOC team and reports to the SOC Manager. The primary purpose of this position is to help coordinate and report on cyber incidents impacting U.S. State, Local, Tribal, and Territorial (SLTT) governments. This position involves critical duties and responsibilities that must continue to be performed during crisis situations and contingency operations, which may necessitate extended hours of work.

What You’ll Do

• Responsible for working in a 24x7 Security Operation Center (SOC) environment.
• Provide analysis of network and host-based security events and trends of security log data from a large number of heterogeneous security devices.
• Provide incident response (IR) support when analysis confirms actionable incident.
• Provide threat and vulnerability analysis as well as security advisory services.
• Analyze and respond to previously undisclosed software and hardware vulnerabilities.
• Investigate, document, and report on information security issues and emerging trends.
• Coordinate with intel analysts on open-source activities impacting SLTT governments.
• Integrate and share information with other analysts and other teams.
• Other tasks and responsibilities as assigned.

What You’ll Need

• Bachelor’s degree in a related field or equivalent demonstrated experience and knowledge.
• Experience analyzing network and host-based security events.
• Knowledge of various security methodologies and processes, and technical security solutions.
• Knowledge of incident response life cycle and steps.
• Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
• Knowledge of common Internet protocols and applications.
• This position requires U.S. citizenship.

It’s a Plus If You Have

• GCIA, GCIH, Network+, Security+, or other related certifications.
• 1+ years' experience as a Security/Network Administrator or equivalent knowledge.
• Working knowledge of databases and database querying languages.
• Experience in an incident response or incident handler position.
• Additional years of relevant experience or a combination of an Associate’s degree or equivalent and relevant experience may be substituted for the Bachelor’s degree.

Factors That May Cause a Negative Fitness Review Decision Include

• Criminal Conduct
• Dishonest Conduct
• Employment Misconduct
• Alcohol Abuse
• Drug Use (illegal drug use or use of a legal drug in a manner that deviates from approved medical direction)
• Additionally, illegal drug use includes the use of drugs that are illegal for federal purposes despite being legal in select states and countries, such as marijuana.
• False Statements
• Financial Issues
• Have not resided in the US for three (3) of the past five (5) years

At CIS, we are committed to providing an inclusive environment in which the diverse backgrounds, experiences, and views of our employees, members, and customers are valued and respected. It is through this commitment that we are able to work together towards our common mission: to make the connected world a safer place.

Compensation Range: $34.47 - $56.88

Benefits

• Health (PPO, EPO, HSA)
• Dental & Vision Insurance eligibility starting from the first day of hire
• $500 wellness card for Health Coverage Participants
• 401(k) with 4% Company Match, vested from the first day of hire
• Flexible Spending Account (FSA) & Dependent Care Account (DCA)
• Life Insurance
• Bonding Leave
• Paid Volunteering Program
• Bonus eligibility
• Paid Time Off (PTO) inclusive of vacation, personal and sick time
• Paid Holidays
• Wellness Program
• Employee Engagement Activities
• Professional Development Opportunities
• Tuition Reimbursement
• Student Loan PayDown Program
• Employee Referral program
• Employee Assistance Program

About CIS

The Center for Internet Security (CIS) makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation. We are a community-driven nonprofit responsible for industry-leading best practices for securing IT systems and data. CIS is also a trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) government entities and election offices. CIS has an award-winning reputation for investing in its people, as well as continuous learning and development. We offer our employees diverse opportunities to expand their impact personally and professionally, in their local communities, and among one another. Core Leadership Principles drive our employees at every level of the organization, empowering them to be leaders in everything they do. We are a community-driven nonprofit, responsible for the CIS Controls® and CIS Benchmarks™, globally recognized best practices for securing IT systems and data. We lead a global community of IT professionals to continuously evolve these standards and provide products and services to proactively safeguard against emerging threats. Our CIS Hardened Images® provide secure, on-demand, scalable computing environments in the cloud. CIS is home to the Multi-State Information Sharing and Analysis Center® (MS-ISAC®), the trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial government entities, and the Elections Infrastructure Information Sharing and Analysis Center® (EI-ISAC®), which supports the rapidly changing cybersecurity needs of U.S. elections offices.