SOC Analyst (Secret Clearance)

ShorePoint, LLC; Denver (CO); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

85% insurance premiums covered

401(k)

Continuing education

Certification maintenance & reimburse

Job summary

ShorePoint, LLC seeks a Security Operations Center (SOC) Analyst to monitor and analyze threats across enterprise systems. You will use SIEM tools, perform vulnerability scans, and administer security tools to support remediation for high-threat clients in public and private sectors.

The role requires 5+ years in IT cybersecurity within a consulting environment, active Secret clearance, and relevant certifications.

Qualifications

• Bachelor’s degree from an accredited university, preferably in an IT related field.
• One or more of the following certifications: CISSP, CISA, CISM, Security+ or CAP.
• 5+ years of information technology, cybersecurity experience for a consulting organization, including SOC responsibilities.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Active Secret clearance required.

Responsibilities

• Monitor and analyze potential threat activity, identify security events and incidents using SIEM tools.
• Provide real-time alerting and monitoring, index and correlate security data, generate metrics and visuals.
• Operate security tools, administer Tenable/Nessus, and manage scan policies and reports.
• Conduct daily and ad hoc vulnerability scans, track findings, and coordinate remediation with stakeholders.
• Perform DISA STIG baseline scans and manual review of findings.
• Monitor incoming security events and maintain audit logs using Splunk.
• Prepare vulnerability management metrics for leadership and participate in weekly meetings.
• Verify hardware/software inventories and identify emerging threats via analytics.
• Provide technical support for vulnerability/risk assessments and security implementations.
• Evaluate customer systems and recommend security improvements and upgrades.

Skills

Cybersecurity experience

Critical thinking

Analytical skills

Education

Bachelor’s degree

Tools

Splunk

Q‑Audit ICS‑500‑27 Splunk app

Tenable Nessus

Cylance

ExtraHop

Burp Suite

Job description

Who We Are

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers.

• 144 hours of PTO
• 11 holidays
• 85% of insurance premiums covered
• a 401(k)
• continuing education
• certification maintenance and reimbursement
• and more

Who We’re Looking For

We are seeking a Security Operations Center (SOC) Analyst to monitor and analyze potential cybersecurity threats and support security operations across enterprise systems and networks. This role performs security event monitoring, vulnerability scanning, configuration assessments and security tool administration to help identify risks and support remediation efforts. The SOC Analyst position requires experience in cybersecurity operations, security monitoring technologies and vulnerability management within a consulting environment. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What You’ll Be Doing

• Monitor and analyze potential threat activity, identify security events and incidents using Security Information and Event Management (SIEM) tools and assess the effectiveness of existing security measures.
• Provide real-time alerting and monitoring by capturing, indexing and correlating security data to generate graphs, reports, alerts and visualizations, produce metrics and diagnose security problems.
• Provide engineering support, operations and maintenance for security tools, including routine Tenable Security Center administration of user accounts, scan policies and reports.
• Conduct daily and ad hoc vulnerability scans of networks and systems, track and verify findings and promote timely remediation or coordinate extension requests with stakeholders.
• Conduct Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) baseline configuration scans of hardware and network devices, including manual review of Category I and Category II findings that cannot be checked through automated scans.
• Monitor incoming security events and maintain audit log management using Splunk.
• Prepare vulnerability management metrics reports for senior leadership to communicate network security status and participate in weekly operations and maintenance meetings to discuss vulnerability patch management.
• Validate hardware and software inventories across a portfolio of systems and use advanced analytics to identify emerging threat patterns and vulnerabilities.
• Provide technical support for vulnerability assessments, risk assessments, network security, product evaluations and security implementation.
• Conduct technical evaluations of customer systems, assist with security improvements and recommend products, technologies and upgrades to strengthen security posture.
• Conduct security testing and audit log reviews.

What You Need To Know

• Cybersecurity tools, including Splunk Enterprise Security, Q‑Audit ICS‑500‑27 Splunk application, Tenable Nessus Security Center, Cylance, ExtraHop and Burp Suite, or equivalent tools

Must Have’s

• Bachelor’s degree from an accredited university, preferably in an IT related field.
• One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), CompTIA Security+ or Certified Authorization Professional (CAP).
• 5+ years of information technology, cybersecurity experience for a consulting organization, including skills and responsibilities relative to the SOC role.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active Secret clearance.

Beneficial To Have

• Previous DOJ experience.
• Military experience.

Where It’s Done

• Onsite (Denver, CO or Crystal City, VA).