SOC Analyst

Dunhill Professional Search & Government Solutions; Bethesda (MD); Hybrid; USD 90.000 - 130.000; Vollzeit

Zusammenfassung

Dunhill Professional Search & Government Solutions is seeking a Hybrid SOC Analyst in Bethesda, MD. You will monitor security threats, analyze events, and implement countermeasures while ensuring compliance with NIST and NIH controls. The role involves incident response, investigations, and ongoing SOP improvements.

You will work with tools like Splunk, Tenable, Defender, Netsparker, ServiceNow, and Cylance to protect organizational assets and report findings to stakeholders.

Qualifikationen

• 3+ years in the Cyber Security field with enterprise monitoring and incident response experience.
• Advanced experience with Splunk and Tenable/Security Center.
• Bachelor’s or Master’s in IT or equivalent security operations management experience.
• CISSP, CISM, CySA+, or GCIH certifications are preferred.

Aufgaben

• Monitor and analyze security threats and implement countermeasures.
• Ensure compliance with NIST and NIH security controls and reporting requirements.
• Manage incident response and investigations into breaches.
• Develop, implement, and oversee SOC standard operating procedures.
• Communicate security status to stakeholders and maintain documentation.

Kenntnisse

Security monitoring

Incident response

Log analysis

Regulatory compliance

Ausbildung

Bachelor's or Master’s Degree in IT or related

Tools

Splunk

Tenable Security Center

Microsoft Defender

Netsparker

ServiceNow

Cylance

Jobbeschreibung

Hybrid-- 2 days a week onside in Bethesda, MD

The Security Operations Center Analyst will be responsible for monitoring and analyzing security threats and implementing appropriate countermeasures to protect the organization's information assets.

Key Responsibilities:

• Monitor and analyze security threats and vulnerabilities and implement appropriate countermeasures
• Ensure compliance with regulatory compliance directives, including various NIST and NIH security controls and monitoring and reporting requirements
• Manage incident response efforts and assist in investigations into security breaches
• Manage and maintain Security Waivers, perform product evaluations and advise management of upcoming changes to the environment
• Communicate and report to stakeholders on security-related documents and status updates
• Assist in the development, implementation and oversight of SOC standard operating procedures used to guide daily activities of the operations center
• Utilize various security tools lik e Tenable Security Center, Splunk, MS Defender, SEIM, Symantec DLP, Netsparker, Penetra tion Testing, Service Now, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, and Endpoint Protection (Cylance)

Qualifications:

• At least three years of experience within the Cyber Security industry, with e xperience in security event monitoring and incident response services within an enterprise network security environment
• Candidates should have advanced experience with Splunk and Tenable (Nessus or Security Center)
• Bachelor’s or Master’s Degree in Information Technology or related disciplines; or have equivalent and direct experience with the management, operation, and direction of a network and/or security operations center
• CISSP, CISM, CySA+, or GCIH certifications are desired
• Strong understanding of log analysis and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryption standards
• Strong understanding of the various industry standard cyber security disciplines and generally accepted practices governing the present-day cyber security industry
• Strong understanding of regulatory compliance directives to include various NIST and NIH security controls and monitoring and reporting requirements
• Experience with managing and ensuring the timely response and investigations of security events and incidents within a security operations center #cjpost