SOC Analyst

ERT, Inc.; Suitland (MD); On-site; USD 70,000 - 100,000; Full time

Job summary

An established industry player is seeking a dedicated SOC Analyst to join their team at a prominent government agency. This role involves critical responsibilities such as incident response, forensic analysis, and vulnerability management. The ideal candidate will possess extensive experience with database management systems, advanced programming skills, and familiarity with various security tools. This is an excellent opportunity to contribute to national security efforts while working in a collaborative environment that values expertise and innovation.

Qualifications

• 6+ years of experience in DBMS administration and design.
• Hands-on experience with SIEM tools and forensic analysis.

Responsibilities

• Support OSPO's Security Management Center in incident response.
• Review and analyze IT system audit logs for security incidents.

Skills

Database Management System (DBMS)

SQL

NoSQL

Forensic analysis

Vulnerability Management

Incident Response (IR)

Advanced programming (Python, C++, JavaScript, HTML, PHP)

Education

Relevant certifications (Security+, Network+, etc.)

Tools

Splunk

ArcSight

Tripwire

Tenable Security Center

IBM BigFix

FireEye

Job description

Position Description

ERT is seeking a SOC Analyst to support work at the NOAA National Environmental Satellite Data and Information Service (NESDIS) Office of Satellite and Product Operations (OSPO). This position will support OSPO's Security Management Center (SMC) Team in responding to security incidents and other emergency actions. Duties include reviewing and analyzing IT system audit logs, responding and managing Incident Response (IR), and coordinating with the systems' ISSOs and the NOAA Cybersecurity Center (NCSC). This position is located on-site at NOAA's Satellite Operations Facility (NSOF) in Suitland, MD.

Requirements

A minimum of 6 years of experience in the following:

• Database Management System (DBMS) administration, design, and implementation experience
• Hands-on experience with SQL, NoSQL DBMS tools, Splunk, and Security Information and Event Management (SIEM) tools (e.g., ArcSight and Tripwire)
• Advanced programming languages such as Python, C++, JavaScript, HTML, and PHP
• Forensic analysis (network and/or digital), including collection of artifacts and familiarity with chain of custody procedures
• Familiarity with Vulnerability Management (VM) processes, including VM tool experience and analysis of VM scans
• Ability to review and track remediation of vulnerabilities and identify DISA STIG gaps via multiple scan resources
• Previous experience supporting DHS CISA Binding Operational Directives (BOD) procedures, including system notification, impact analysis, tracking, documented remediation, and CISA reporting
• Proficiency with tools such as Splunk, ArcSight, Tripwire, Tenable Security Center, IBM BigFix, FireEye, and CSAM (highly desired)
• At least one of the following certifications: Security+, Network+, GSEC, GCIA, GCIH, C|EH, GCFE, or Splunk Fundamentals I or II
• Willingness to be