SOC Analyst II: Threat Hunting & Incident Response

Targeted Solutions, LLC; Colorado Springs (CO); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

PTO

Flexible holidays

Healthcare cost reimbursement

401K with 4% matching

Job summary

Targeted Solutions, LLC is seeking a Security Operations Center Analyst II to provide around-the-clock defense, monitoring and response. You will analyze security events, perform advanced analytics, and support DoD SAP/SCI activities across enterprise networks, leveraging SIEM, log management and threat-hunting capabilities.

The role requires prior ISSO/ISSM experience, DoD-related certifications, and a solid understanding of TCP/IP, DNS, DHCP, and Windows Active Directory in an enterprise

Qualifications

• 5-7 yrs — Related experience
• Prior performance in roles such as ISSO or ISSM
• Bachelor’s degree in a related area OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years)

Responsibilities

• Provide 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise
• Conduct security event monitoring, advanced analytics and response activities
• Operate SIEM platforms and log management systems for collection, analysis, correlation and alerting
• Lead incident handling, hunting and malware analysis efforts
• Support DoD SAP/SCI/SAP activities and enterprise security operations workflows
• Develop rules, filters and detections to support analysis and detection efforts
• Analyze NetFlow data and PCAP as part of threat investigations

Skills

Incident Handling

Malware Analysis

SIEM

Log Management

Network Forensics

Windows OS

Active Directory

Networking Protocols

PCAP / NetFlow

Threat Hunting

Education

Bachelor's degree in related area

Associate’s degree + 2 years experience

Tools

SIEM platforms

Log Analysis

Job description

Targeted Solutions, LLC is seeking a Security Operations Center Analyst II to provide around-the-clock defense, monitoring and response. You will analyze security events, perform advanced analytics, and support DoD SAP/SCI activities across enterprise networks, leveraging SIEM, log management and threat-hunting capabilities.

The role requires prior ISSO/ISSM experience, DoD-related certifications, and a solid understanding of TCP/IP, DNS, DHCP, and Windows Active Directory in an enterprise