SOC Analyst

ASRC Federal Holding Company; Alexandria (VA); À distance; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Health care

Dental

Vision

Life insurance

401(k)

Education assistance

Paid time off

Résumé du poste

ASRC Federal is seeking a SOC Analyst to support the DoWEA Enterprise Cyber Program. This role focuses on RMF compliance, vulnerability management, security monitoring, and incident response in collaboration with cybersecurity personnel.

This is a remote position requiring scheduled night and weekend shifts in support of SOC operations, with an active Secret clearance required.

Qualifications

• Minimum of five years of cybersecurity experience including SOC operations, security monitoring and incident response.
• Must hold and maintain an active Security+ certification.
• Experience with SIEM tools such as Microsoft Sentinel.
• Experience leading and managing SOC operations.
• Expertise in analyzing network packets, SIEM alerts, and server/application logs.
• Experience tracking incidents using MITRE ATT&CK or Cyber Kill Chain.

Responsabilités

• Monitor and analyze network traffic, system logs, and security data for signs of malicious activity.
• Use SIEM tools to investigate alerts and notable events.
• Manage incidents throughout their lifecycle: analysis, triage, containment and remediation.
• Recommend improvements to prevent future incidents and expedite response.
• Communicate with technical and nontechnical stakeholders.
• Prepare situational awareness reports for customer and management.
• Develop and maintain incident response playbooks.
• Support development of SIEM detection and data ingestion strategies.
• Conduct host and log forensic analysis and malware analysis as needed.
• Perform threat hunting based on emerging adversary tactics.

Connaissances

SOC operations

Security monitoring

Incident response

Night/weekend shifts

Remote work

Outils

Microsoft Sentinel

Description du poste

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™

SOC Analyst

Location: Remote | Night and Weekend Shifts Required

Active Secret Clearance Required

ASRC Federal is seeking a SOC Analyst to support the Department of Defense Education Activity ( DoWEA ) Enterprise Cyber Program. This role supports enterprise cybersecurity operations, including Risk Management Framework (RMF) compliance, vulnerability management, security monitoring, and incident response, in collaboration with other cybersecurity personnel.

T his is a remote position requiring scheduled night and weekend shifts in support of SOC operations.

Key Responsibilities

• Monitor and analyze network traffic, system logs, and other security data for signs of malicious activity.

• Use Security Information and Event Management (SIEM) tools to investigate security alerts and notable events.

• Manage incidents throughout their lifecycle, including analysis, triage, containment, and remediation.

• Recommend improvements to prevent future incidents and expedite response based on lessons learned.

• Communicate effectively and promptly with technical and nontechnical stakeholders.

• Prepare situational awareness reports for the customer and management.

• Develop and maintain manual and automated incident response playbooks.

• Support the development of SIEM detection and data ingestion strategies to improve SOC visibility.

• Conduct host and log forensic analysis and malware analysis as needed.

• Perform threat hunting based on emerging adversary tactics, techniques, and procedures.

• Develop and implement security procedures to prevent future incidents.

• Provide technical support to other members of the security team.

• Stay current on cybersecurity threats and trends.

Required Skills, Certifications, and Qualifications

• Minimum of five years of relevant cybersecurity experience, including SOC operations, security monitoring, and incident response.

• Must hold and maintain an active Security+ Certification.

• Experience with SIEM tools, such as Microsoft Sentinel.

• Experience leading and managing SOC operations.

• Expertise in analyzing network packets, SIEM alerts, and server and application logs to investigate anomalous or malicious activity.

• Experience tracking incidents using frameworks such as MITRE ATT&CK or the Cyber Kill Chain.

• Ability to analyze advanced persistent threats and map the threat lifecycle.

• Ability to work scheduled night and weekend shifts remotely.

• Active Secret security clearance.

Desired Skills

• Experience with Microsoft Sentinel.

• Forensic investigation and malware analysis experience.

• Strong curiosity and problem-solving skills.

• Proactive approach and a strong sense of ownership.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.