SOC Analyst

RPMGlobal; College Park (MD); On-site; USD 66,000 - 242,000; Full time

Job summary

An established industry player is seeking a skilled SOC Analyst to join their dynamic team at NOAA. This role involves critical responsibilities in managing and responding to security incidents, analyzing system audit logs, and ensuring the integrity of data through forensic analysis. The ideal candidate will have extensive experience with database management, advanced programming skills, and familiarity with various cybersecurity tools. This position offers a unique opportunity to contribute to national security efforts while working in a collaborative environment that values professional development and innovation. If you're ready to make an impact in the cybersecurity field, this role is perfect for you.

Benefits

Medical, Rx, Dental, and Vision Insurance

401(k) retirement plan with company-matching

11 Paid Federal Government Holidays

Basic Life & Supplemental Life

Health Savings Account

Tuition Reimbursement

Employee assistance program (EAP)

Competitive compensation plan

Discretionary variable incentive bonuses

Publication and Conference Presentation Awards

Qualifications

• 6+ years of experience in DBMS administration and Incident Response.
• Proficiency in SQL, NoSQL, and forensic analysis.

Responsibilities

• Responding to security incidents and managing Incident Response.
• Reviewing IT system audit logs and coordinating with cybersecurity teams.

Skills

Database Management System (DBMS)

SQL

NoSQL

Forensic analysis

Vulnerability Management (VM)

Incident Response (IR)

Advanced programming languages

Splunk

Security Information and Event Management (SIEM)

Education

B.S. in Engineering or related technical field

Tools

Splunk

ArcSight

Tripwire

Tenable Security Center

IBM BigFix Suite

FireEye

CSAM

Job description

Position Description
ERT is seeking a SOC Analyst to support work at the NOAA National Environmental Satellite Data and Information Service (NESDIS) Office of Satellite and Product Operations (OSPO). This position will support OSPO's Security Management Center (SMC) Team in responding to security incidents and other emergency actions. Duties include reviewing and analyzing IT system audit logs, responding and managing Incident Response (IR), and coordinating with the systems’ ISSOs and the NOAA Cybersecurity Center (NCSC).

Requirements
A minimum of 6 years of experience in the following:

• Database Management System (DBMS) administration/design/implementation experience
• Hands-on experience with SQL, NoSQL DBMS tools, Splunk, and Security Information and Event Management (SIEM) tools (e.g., ArcSight and Tripwire)
• Advanced programming languages such as Python, C++, JavaScript, HTML, and PHP
• Forensic analysis (network and/or digital) to include collection of artifacts and familiarity of chain of custody procedures
• Familiarity with Vulnerability Management (VM) processes including VM tool experience and analysis of completed VM scans
• Ability to review and track remediation of vulnerabilities and identify DISA STIG gaps via multiple scan resources
• Previous experience supporting DHS CISA Binding Operational Directives (BOD) procedures including system notification, impact analysis and tracking, documented remediation, and CISA reporting requirements
• Proficiency with the following tools highly desired: Splunk (Log Aggregator), ArcSight (SIEM), Tripwire (file/system integrity tool), Tenable Security Center (SC) (Vulnerability Scanning tool), IBM BigFix Suite (Patching), FireEye, and CSAM
• At least one of the following certifications is required: Security+ or Network+, GSEC, GCIA, GCIH, C|EH, GCFE, Splunk fundamentals I or II Engineering or IT Sec architecture
• Willingness to be “On-Call” to support 24x7x365 for Incident Response (IR) and other emergency actions when requested

Must be a US Citizen or Permanent Resident who has lived in the United States at least 3 out of the last 5 years and be able to pass a background investigation to obtain a security badge to access applicable government facilities and systems.

Education
B.S. in Engineering or related technical field, or equivalent combination of education and experience.

Location
The position is on-site at NOAA’s Satellite Operations Facility in Suitland, MD. Telework permitted when not requested to be on site for Incident Response.

Salary
The salary range for this role is $66,000 - 242,000/year. This range is a good faith estimate based on similar roles across the organization. ERT considers several factors when extending an offer of employment, including the location, scope, and associated responsibilities of the specific position, as well as a candidate’s work experience, education/training, and key skills.

Benefits
All full-time employees are eligible to participate in our flexible benefits package, which includes:

• Medical, Rx, Dental, and Vision Insurance
• 401(k) retirement plan with company-matching
• 11 Paid Federal Government Holidays
• Basic Life & Supplemental Life
• Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Employee assistance program (EAP)
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Professional Membership Reimbursement
• Employee Referral Program
• Competitive compensation plan
• Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company’s performance
• Publication and Conference Presentation Awards with bonuses

ERT is a VEVRAA Federal Contractor and Equal Opportunity/Affirmative Action employer - All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, or protected Veteran status.