Security Operations Center Analyst (SOC) II

System Soft Technologies; Arlington (VA); Presencial; USD 90.000 - 120.000; Jornada completa

Descripción de la vacante

System Soft Technologies seeks a SOC Analyst II to support mission-critical cybersecurity operations through continuous network monitoring, incident detection, and response. You will use SIEM tools to maintain enterprise security and system availability across program networks.

The role requires on-site work five days a week, DoD TS/SCI eligibility, and DoD IAT Level II certification, with experience in investigating incidents and applying robust threat analytics.

Formación

• Bachelor's degree or associate's with relevant experience; substitution allowed.
• 2+ years of relevant cybersecurity experience.
• DoD Top Secret clearance with SCI eligibility required.
• DoD IAT Level II Certification required.
• Experience investigating and responding to cybersecurity incidents.
• Knowledge of network protocols, operating systems, endpoint security, and cyber threat methodologies.
• Strong analytical, problem-solving, and communication skills.

Responsabilidades

• Monitor program networks and devices via provided dashboards.
• Perform event and incident management per established procedures.
• Conduct backup and recovery procedures as needed.
• Analyze network events within all program networks.
• Report outages or incidents following guidelines and procedures.
• Security event monitoring using SIEM toolsets.
• Detect, analyze, and respond to incidents; coordinate containment, eradication, and recovery.
• Utilize analytics tools for log collection, analysis, and alerting.
• Provide Mobile Phone support including activating/deactivating SIM cards.
• Other duties as assigned by the NOSC Lead.

Conocimientos

Incident response

Cybersecurity analysis

Communication skills

Analytical thinking

Fast-paced work

Educación

Bachelor's degree

Associate's degree + 2+ years experience or 4 years experience substitute

Herramientas

Splunk

Carbon Black

F5

FireEye

NetWitness

Wireshark

Nessus

ExtraHop

OpenText NDR

XSOAR

McAfee ePO

Snort

Stealthwatch

IronPort

tcpdump

Descripción del empleo

Client is seeking a Security Operations Center (SOC) Analyst II to support mission-critical cybersecurity operations through continuous network monitoring, security event analysis, incident detection and response, and the use of SIEM tools to maintain the security and availability of enterprise systems.

Responsibilities

• This role requires being onsite five days a week
• Monitor all identified devices and applications via provided dashboards on program networks
• Perform event and incident management in accordance with established processes and procedures
• Conduct backup and recovery procedures as needed
• Analyze network events within all program networks
• Report outages or incidents following guidelines and procedures
• Responsible for security event monitoring utilizing SIEM toolsets
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident
• Utilize security and operation analytics tools for log collection, analysis, and alerting
• Perform additional tasks or duties as directed by the NOSC Lead
• Provide Mobile Phone support to include activating and deactivating SIM cards
• Other duties as assigned

Qualifications

• Bachelor's degree. Associate's degree with 2+ years relevant experience or 4 years relevant experience may substitute
• 2 years relevant experience
• DoD Top Secret Clearance with SCI eligibility is required
• DoD IAT Level II Certification is required
• Experience investigating and responding to cybersecurity incidents
• Knowledge of network protocols, operating systems, endpoint security, and cyber threat methodologies
• Strong analytical, problem-solving, and communication skills
• Ability to work effectively in a fast-paced, mission-critical environment.

Knowledge, Skills and Abilities

• Experience supporting a 24x7 SOC/NOSC environment for government or commercial clients.
• Hands-on experience with a variety of the following technologies:
• Splunk
• Carbon Black
• F5
• FireEye
• NetWitness
• Wireshark
• Nessus
• ExtraHop
• OpenText NDR
• XSOAR
• McAfee ePO
• Snort
• Stealthwatch
• IronPort
• tcpdump
• Familiarity with cyber threat intelligence, attack methodologies, and defensive cyber operations.
• Understanding of network operating systems, service management processes, and operational performance metrics.