SK Watch Floor Analyst

Probity Inc.; McLean (VA); On-site; USD 100,000 - 150,000; Full time

Job summary

Probity Inc. is seeking a qualified cybersecurity professional to monitor networks, analyze security events, and lead incident response efforts across 24/7 operations in support of critical infrastructure.

The role requires 3+ years in cyber security, DoD 8570 IAT-II readiness within 6 months, and strong expertise in SIEM, threat intel, and incident handling to communicate findings to executives.

Qualifications

• 3+ years of experience in a cyber security related role.
• Ability to obtain a DoD 8570 IAT-II certification within 6 months of hire.
• Knowledge of cybersecurity principles, incident detection, and response methodologies.
• Experience working with various operating systems, network protocols, and enterprise security technologies.
• Knowledge of threat intelligence application and security incident response best practices.
• Proficiency in conducting log analysis and correlating data from multiple security platforms.
• Ability to translate technical findings into actionable executive summaries.

Responsibilities

• Participate in the detection and continuous monitoring of potential security incidents across diverse network environments.
• Perform deep-dive analysis and investigation into complex security alerts to determine root causes and impact.
• Execute rapid incident response and mitigation strategies to contain threats and restore normal operations.
• Integrate threat intelligence and vulnerability management data to proactively identify and defend against emerging risks.
• Maintain comprehensive reporting and documentation for all security events to ensure compliance and historical accuracy.
• Collaborate with cross-functional teams to refine incident response playbooks and enhance overall defensive posture.

Skills

Cyber security

Threat detection

Incident response

Log analysis

Executive summaries

DoD 8570 IAT-II

Threat intelligence

Tools

SIEM

IDS/IPS

Firewalls

Job description

PLEASE NOTE: This position requires an ACTIVE Top Secret/SCI Clearance with Polygraph. To be considered for this position, you MUST have an ACTIVE Clearance Level of Top Secret/SCI with Polygraph

Position Code: 26-SE0904-1

Position Description:

Second Shift 1st and 2nd Half

This role supports our customer by providing critical 24x7x365 coverage to protect mission-essential infrastructure. The selected candidate will work a fixed 4-day work week consisting of 10-hour shifts, with available schedules assigned to either Sunday through Wednesday or Wednesday through Saturday. We have openings across 1st (6am to 4pm), 2nd (12pm to 10pm), and 3rd (9pm to 7am) shifts, with shift differentials applied to the 2nd and 3rd shifts. Please note that all new team members must be able to complete initial training on the day shift for a period of six weeks.

Responsibilities

• Participate in the detection and continuous monitoring of potential security incidents across diverse network environments.
• Perform deep-dive analysis and investigation into complex security alerts to determine root causes and impact.
• Execute rapid incident response and mitigation strategies to contain threats and restore normal operations.
• Integrate threat intelligence and vulnerability management data to proactively identify and defend against emerging risks.
• Maintain comprehensive reporting and documentation for all security events to ensure compliance and historical accuracy.
• Collaborate with cross-functional teams to refine incident response playbooks and enhance overall defensive posture.

Requirements:

• 3+ years of experience in a cyber security related role.
• Ability to obtain a DoD 8570 IAT-II certification within 6 months of hire.
• Knowledge of cybersecurity principles, incident detection, and response methodologies.
• Experience working with various operating systems, network protocols, and enterprise security technologies.
• Knowledge of threat intelligence application and security incident response best practices.
• Proficiency in conducting log analysis and correlating data from multiple security platforms.
• Ability to translate technical findings into actionable executive summaries.