SOC Operations/Watch Floor Cybersecurity Analyst - Mid with Security Clearance

TMC TECHNOLOGIES; Clarksburg (WV); On-site; USD 90,000 - 140,000; Full time

Job summary

TMC Technologies is recruiting a mid-level Cybersecurity Analyst to join the FBI's ESOC Watch Floor Operations Team. The role operates 24/7 to detect and respond to cyber threats, supporting a federally contracted program.

Candidates must be a US citizen with an active Top Secret clearance and SCI eligibility, have a bachelor's degree, and at least five years of relevant experience. SIEM expertise and Splunk proficiency are preferred.

Qualifications

• Must be a US citizen with a current Top Secret clearance and SCI eligibility.
• Minimum 5 years of relevant cybersecurity work experience.
• Bachelor's degree required; government contracting experience preferred.

Responsibilities

• Monitor networks for security issues and intrusions in real time.
• Investigate security breaches and analyze incidents.
• Document incidents and assess damages for remediation.
• Conduct tests with the security team to uncover vulnerabilities.
• Fix vulnerabilities and implement best IT security practices.
• Install security measures including firewalls and encryption.
• Analyze data and create forensic copies as needed.
• Provide technical summaries and input on decrypted data.
• Perform real-time defense tasks to support IRTs during shifts.

Skills

US citizenship

Top Secret clearance with SCI

5+ years experience

SIEM experience

Splunk

Cybersecurity

Incident response

Education

Bachelor's degree

Tools

SIEM

Splunk

Microsoft Sentinel

Job description

TMC Technologies is in search of a mid-level Cybersecurity Analyst to join the FBI's ESOC Watch Floor Operations Team, playing a crucial role in the FBI's cybersecurity defense strategy. Operating around the clock, 24/7, 365 days a year, this dynamic team ensures the timely detection and resolution of potential security incidents, thereby minimizing the impact of cyber threats on the organization.
The watch floor team is responsible for actively detecting, monitoring, preventing, and analyzing real-time cybersecurity information, events, and threats.
The candidate must be a US citizen and possess a minimum of an active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility to start due to federal contract requirements.
This position is in support of a newly awarded contract and requires shift work. The Watch Floor Cybersecurity Analyst

• Mid will have the following responsibilities:
• Responsible for monitoring computer networks for security issues.
• Investigating security breaches and other cybersecurity incidents.
• Document security breaches and assess the damage they cause.
• Work with the security team to perform tests and uncover network vulnerabilities, such as penetration testing.
• Fix detected vulnerabilities to maintain a high-security standard.
• Recommend best practices for IT security.
• Installing security measures and operating software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Must be capable of conducting analysis, confirming intrusion information and creating a forensically sound duplicate of the files.
• Decrypts data and provides technical summaries and input.
• Examines recovered data for relevant information and performs dynamic analysis to include timeline, statistical, and file signature analysis.
• Performs real-time cyber defense handling tasks to support deployable Incident Response Teams (IRTs). SHIFTS AVAILABLE: Sun-Wed 9pm-7am Job Requirements
• US Citizenship and active Top Secret clearance with SCI eligibility required
• Minimum of 5 years of relevant experience required
• Bachelor's Degree required
• Experience with security information and event management (SIEM) systems preferred
• Splunk experience required
• Preferred certifications include:

• GIAC Continuous Monitoring Certification (GMON)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Network Forensic Analyst (GNFA)
• Microsoft Sentinel

We are equal opportunity/affirmative action employers, committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status, or any other protected characteristic under state or local law.