SOC Analyst

ASM Research, An Accenture Federal Services Company; Bethesda (MD); On-site; USD 100,000 - 125,000; Full time

Job summary

ASM Research, an Accenture Federal Services company, seeks a cybersecurity professional to monitor threats, coordinate incident response, and ensure NIST/NIH compliance. You will analyze security data, support investigations, and report status to stakeholders.

Responsibilities include maintaining SOC SOPs, using Splunk, Tenable, and MS Defender, and guiding security operations in enterprise environments. A degree and certifications are preferred.

Qualifications

• Minimum three years of cyber security experience in security event monitoring and incident response in an enterprise network
• Bachelor’s or Master’s in IT or related field or equivalent SOC management experience
• CISSP, CISM, CySA+, or GCIH certifications are desirable
• Strong knowledge of log analysis, security event monitoring, intrusion detection, and firewall tech
• Advanced experience with Splunk and/or Tenable Nessus
• Familiarity with regulatory compliance including NIST and NIH controls
• Experience coordinating investigations and timely responses to security incidents in a SOC

Responsibilities

• Monitor and analyze security threats and vulnerabilities and implement countermeasures
• Ensure compliance with regulatory directives including NIST and NIH controls and monitoring/reporting requirements
• Manage incident response efforts and assist investigations into security breaches
• Manage/maintain Security Waivers, perform product evaluations, advise on upcoming changes
• Communicate and report to stakeholders on security documents and status updates
• Assist in development and oversight of SOC SOPs for daily operations
• Utilize security tools such as Tenable, Splunk, MS Defender, SIEM, and others for protections

Skills

Log analysis

Incident response

Security event monitoring

Regulatory compliance

Threat monitoring

Vulnerability management

Education

Bachelor's or Master's in IT or related

Equivalent experience in SOC management

Tools

Tenable Security Center

Splunk

MS Defender

SIEM

Symantec DLP

Netsparker

Penetration Testing

ServiceNow

Web Application Security

Data Loss Prevention

Incident Response

Forensics

Security Tool Evaluation

Endpoint Protection

Job description

Key Responsibilities:

• Monitor and analyze security threats and vulnerabilities and implement appropriate countermeasures
• Ensure compliance with regulatory compliance directives, including various NIST and NIH security controls and monitoring and reporting requirements
• Manage incident response efforts and assist in investigations into security breaches
• Manage and maintain Security Waivers, perform product evaluations and advise management of upcoming changes to the environment
• Communicate and report to stakeholders on security-related documents and status updates
• Assist in the development, implementation and oversight of SOC standard operating procedures used to guide daily activities of the operations center
• Utilize various security tools like Tenable Security Center, Splunk, MS Defender, SEIM, Symantec DLP, Netsparker, Penetration Testing, Service Now, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, and Endpoint Protection (Cylance)

Qualifications:

• At least three years of experience within the Cyber Security industry, with experience in security event monitoring and incident response services within an enterprise network security environment
• Bachelor’s or Master’s Degree in Information Technology or related disciplines; or have equivalent and direct experience with the management, operation, and direction of a network and/or security operations center
• CISSP, CISM, CySA+, or GCIH certifications are desired
• Strong understanding of log analysis and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryption standards
• Candidates should have advanced experience with Splunk and/or Tenable Nessus
• Strong understanding of the various industry standard cyber security disciplines and generally accepted practices governing the present-day cyber security industry
• Strong understanding of regulatory compliance directives to include various NIST and NIH security controls and monitoring and reporting requirements
• Experience with managing and ensuring the timely response and investigations of security events and incidents within a security operations center

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

$100,000 - $125,000

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, gender identity, veteran status, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, veteran status, disability, gender identity, or age. All decisions on employment are made to abide by the principle of equal employment.