SOC Analyst (Secret Clearance) with Security Clearance

ShorePoint, LLC; Denver (CO); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

85% of insurance premiums covered

401(k)

Continuing education and certification

Certification maintenance and reimbur…

Job summary

ShorePoint, LLC in Denver, CO, is seeking a Security Operations Center (SOC) Analyst with a Secret clearance to monitor and analyze potential cybersecurity threats across enterprise systems and networks. The role includes security event monitoring, vulnerability scanning, configuration assessments and security tool administration to identify risks and support remediation.

Applicants should have 5+ years in IT/cybersecurity for a consulting environment, strong experience with SIEM tools,

Qualifications

• Bachelor-level IT or related field degree preferred.
• Active Secret clearance required for role.
• 5+ years in information technology or cybersecurity for consulting.
• Experience translating complex requirements into actionable tasks.
• Proven knowledge of security monitoring and vulnerability management.

Responsibilities

• Monitor and analyze threat activity using SIEM and report findings.
• Provide real-time alerting, indexing, correlation, and visualization.
• Administer security tools and conduct Tenable/SC scans and reports.
• Perform vulnerability scans, track findings and coordinate remediation.
• Run STIG baselines and review results for hardware and network devices.
• Monitor events and maintain audit logs with Splunk.
• Prepare vulnerability metrics for senior leadership and participate in meetings.
• Verify inventories and perform security assessments and evaluations.

Skills

Cybersecurity operations

SIEM analysis

Threat monitoring

Vulnerability assessment

Security tool administration

Education

Bachelor's degree in IT or related field

Tools

Splunk Enterprise Security

Q-Audit IC-500-27 Splunk app

Tenable Nessus

Cylance

ExtraHop

Burp Suite

Job description

Who we are:

ShorePoint is a fast‑growing, industry‑recognized and award‑winning cybersecurity services firm focused on high‑profile, high‑threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers.

• Highlighted benefits include 144 hours of PTO, 11 holidays, 85 % of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking a Security Operations Center (SOC) Analyst (Secret Clearance) to monitor and analyze potential cybersecurity threats and support security operations across enterprise systems and networks. This role performs security event monitoring, vulnerability scanning, configuration assessments and security tool administration to help identify risks and support remediation efforts. The SOC Analyst position requires experience in cybersecurity operations, security monitoring technologies and vulnerability management within a consulting environment. This is a unique opportunity to shape the growth, development and culture of an exciting and fast‑growing company in the cybersecurity market.

What you’ll be doing:

• Monitor and analyze potential threat activity, identify security events and incidents using Security Information and Event Management (SIEM) tools and assess the effectiveness of existing security measures.
• Provide real‑time alerting and monitoring by capturing, indexing and correlating security data to generate graphs, reports, alerts and visualizations, produce metrics and diagnose security problems.
• Provide engineering support, operations and maintenance for security tools, including routine Tenable Security Center administration of user accounts, scan policies and reports.
• Conduct daily and ad hoc vulnerability scans of networks and systems, track and verify findings and promote timely remediation or coordinate extension requests with stakeholders.
• Conduct Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) baseline configuration scans of hardware and network devices, including manual review of Category I and Category II findings that cannot be checked through automated scans.
• Monitor incoming security events and maintain audit log management using Splunk.
• Prepare vulnerability management metrics reports for senior leadership to communicate network security status and participate in weekly operations and maintenance meetings to discuss vulnerability patch management.
• Validate hardware and software inventories across a portfolio of systems and use advanced analytics to identify emerging threat patterns and vulnerabilities.
• Provide technical support for vulnerability assessments, risk assessments, network security, product evaluations and security implementation.
• Conduct technical evaluations of customer systems, assist with security improvements and recommend products, technologies and upgrades to strengthen security posture.
• Conduct security testing and audit log reviews.

What you need to know:

• Cybersecurity tools, including Splunk Enterprise Security, Q-Audit IC-500-27 Splunk application, Tenable Nessus Security Center, Cylance, ExtraHop and Burp Suite, or equivalent tools.
• Must have’s:
• Bachelor’s degree from an accredited university, preferably in an IT related field.
• One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), CompTIA Security+ or Certified Authorization Professional (CAP).
• 5+ years of information technology, cybersecurity experience for a consulting organization, including skills and responsibilities relative to the SOC role.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active Secret clearance.
• Beneficial to have:
• Previous DOJ experience.
• Military experience.
• Where it's done:
• Onsite (Denver, CO or Crystal City, VA).