Security Operations Center Analyst (SOC) II

Job Description

Job Summary

Client is seeking a Security Operations Center (SOC) Analyst II to support mission-critical cybersecurity operations through continuous network monitoring, security event analysis, incident detection and response, and the use of SIEM tools to maintain the security and availability of enterprise systems.

Responsibilities

• This role requires being onsite five days a week
• Monitor all identified devices and applications via provided dashboards on program networks
• Perform event and incident management in accordance with established processes and procedures
• Conduct backup and recovery procedures as needed
• Analyze network events within all program networks
• Report outages or incidents following guidelines and procedures
• Responsible for security event monitoring utilizing SIEM toolsets
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident
• Utilize security and operation analytics tools for log collection, analysis, and alerting
• Perform additional tasks or duties as directed by the NOSC Lead
• Provide Mobile Phone support to include activating and deactivating SIM cards
• Other duties as assigned

Qualifications

• Bachelor's degree. Associate's degree with 2+ years relevant experience or 4 years relevant experience may substitute
• 2 years relevant experience
• DoD Top Secret Clearance with SCI eligibility is required
• DoD IAT Level II Certification is required
• Experience investigating and responding to cybersecurity incidents
• Knowledge of network protocols, operating systems, endpoint security, and cyber threat methodologies
• Strong analytical, problem-solving, and communication skills
• Ability to work effectively in a fast-paced, mission-critical environment.

Knowledge, Skills and Abilities

• Experience supporting a 24x7 SOC/NOSC environment for government or commercial clients.
• Hands-on experience with a variety of the following technologies:
• Splunk
• Palo Alto Networks
• Microsoft Defender
• Carbon Black
• Cisco ASA
• F5
• FireEye
• NetWitness
• Wireshark
• Nessus
• ExtraHop
• OpenText NDR
• XSOAR
• McAfee ePO
• Snort
• Stealthwatch
• IronPort
• tcpdump
• Familiarity with cyber threat intelligence, attack methodologies, and defensive cyber operations.
• Understanding of network operating systems, service management processes, and operational performance metrics.