SOC Analyst (Secret Clearance)

ShorePoint; Denver (CO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO 144 hours

Holidays 11

Health insurance 85% covered

401(k)

Education/certification reimbursement

Job summary

ShorePoint is seeking a Security Operations Center (SOC) Analyst with a Secret clearance to monitor and analyze threats across enterprise systems. You will work in a fast-growing cybersecurity services firm, supporting high-threat public and private sector customers on-site in Denver, CO.

You will operate SIEMs, conduct vulnerability scans, manage security tools, and produce leadership-ready metrics and remediation plans.

Qualifications

• Bachelor's degree from an accredited university.
• Active Secret clearance required.
• 5+ years of information technology/cybersecurity experience for a consulting organization.
• Proven ability to analyze complex requirements and translate them into actionable tasks.
• Certifications: CISSP, CISA, CISM, Security+, or CAP.

Responsibilities

• Monitor and analyze potential threat activity using SIEM tools and assess security measures.
• Provide real-time alerting and monitoring; generate graphs, reports, alerts and visualizations.
• Support security tools engineering, operations and maintenance including Tenable and SIEM configurations.
• Conduct daily/adi hoc vulnerability scans and track findings for remediation.
• Perform STIG baseline scans and manual review of findings.
• Monitor incoming security events and maintain audit logs with Splunk.
• Prepare vulnerability management metrics reports for leadership.
• Verify hardware/software inventories and identify emerging threat patterns.
• Provide technical support for vulnerability assessments and security implementations.
• Evaluate customer systems and recommend improvements to strengthen security posture.
• Conduct security testing and audit log reviews.

Skills

Threat monitoring

SIEM analysis

Vulnerability management

Security tool administration

Analytical thinking

Communication skills

Education

Bachelor's degree (IT or related field)

Active Secret clearance

Tools

Splunk Enterprise Security

Q-Audit ICS-500-27 Splunk

Tenable Nessus

Cylance

ExtraHop

Burp Suite

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a "work hard, play hard" mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual's technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we're looking for:

We are seeking a Security Operations Center (SOC) Analyst (Secret Clearance) to monitor and analyze potential cybersecurity threats and support security operations across enterprise systems and networks. This role performs security event monitoring, vulnerability scanning, configuration assessments and security tool administration to help identify risks and support remediation efforts. The SOC Analyst position requires experience in cybersecurity operations, security monitoring technologies and vulnerability management within a consulting environment. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you'll be doing:

• Monitor and analyze potential threat activity, identify security events and incidents using Security Information and Event Management (SIEM) tools and assess the effectiveness of existing security measures.
• Provide real-time alerting and monitoring by capturing, indexing and correlating security data to generate graphs, reports, alerts and visualizations, produce metrics and diagnose security problems.
• Provide engineering support, operations and maintenance for security tools, including routine Tenable Security Center administration of user accounts, scan policies and reports.
• Conduct daily and ad hoc vulnerability scans of networks and systems, track and verify findings and promote timely remediation or coordinate extension requests with stakeholders.
• Conduct Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) baseline configuration scans of hardware and network devices, including manual review of Category I and Category II findings that cannot be checked through automated scans.
• Monitor incoming security events and maintain audit log management using Splunk.
• Prepare vulnerability management metrics reports for senior leadership to communicate network security status and participate in weekly operations and maintenance meetings to discuss vulnerability patch management.
• Validate hardware and software inventories across a portfolio of systems and use advanced analytics to identify emerging threat patterns and vulnerabilities.
• Provide technical support for vulnerability assessments, risk assessments, network security, product evaluations and security implementation.
• Conduct technical evaluations of customer systems, assist with security improvements and recommend products, technologies and upgrades to strengthen security posture.
• Conduct security testing and audit log reviews.

What you need to know:

• Cybersecurity tools, including Splunk Enterprise Security, Q-Audit ICS-500-27 Splunk application, Tenable Nessus Security Center, Cylance, ExtraHop and Burp Suite, or equivalent tools

Must have's:

• Bachelor's degree from an accredited university, preferably in an IT related field.
• One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), CompTIA Security+ or Certified Authorization Professional (CAP).
• 5+ years of information technology, cybersecurity experience for a consulting organization, including skills and responsibilities relative to the SOC role.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active Secret clearance.

Beneficial to have:

• Previous DOJ experience.
• Military experience.

Where it's done:

• Onsite (Denver, CO or Crystal City, VA).