Computer Network Defense Analyst (SOC) with Security Clearance

Top Skills - Must Haves

• Siem
• Soc
• Top secret clearance
• Cyber security
• CSSP Analyst Top Skills' Details

1. Experience with ArcSight, ACAS, or similar SIEM tools
2. 3+ years of experience with incident handling, forensics, sensor alert tracking, or Cyber Security case management
3. 1+ years of experience in a SOC Mandatory: DoD 8570 CSSP Analyst Baseline Certifications.

• CEH
• CySA+
• CFR - CyberSec First Responder
• Or another CSSP cert as identified in the DoD 8140
• TS/SCI required
• USC only - no dual citizenship Job Description

Serve as a Cyber Security service provider analyst for an infrastructure program supporting a DoD client. Assist with monitoring, analyzing, detecting, and responding to Cyber events and incidents under supervision. Assist with supporting dynamic Cyber defense and delivering operational effects, including intrusion detection and prevention and situational awareness. Create, tune, and compile metrics of all security devices and documentation of processes and procedures. Identify security issues and risks and then develop mitigation plans. Work in a 24/7 security operations center (SOC) environment at an Indianapolis client facility, including maintaining direct contact with client management to provide analysis and trending of security log data from various security devices.

Basic Qualifications

• 3+ years of experience with incident handling, forensics, sensor alert tracking, or Cybersecurity case management
• 1+ years of experience in a SOC
• Experience with Cybersecurity tools, including ArcSight, ACAS, or equivalent SIEM tools
• Experience with Cybersecurity forensics tools and methodologies
• Experience with network ports and protocols
• Experience with log review and analysis
• HS diploma or GED
• DoD 8570 Baseline Certifications for CSSP Analyst
• Ability to work a 12am-12pm or 12pm-12am shift, including some weekends HIGH chance of extension, but recompete is up for contract and Peraton is working to position themselves with the new prime.

Additional Skills & Qualifications
Additional Qualifications:

• Knowledge of industry, government and DoD best practices, including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors
• Knowledge of DoD system solutions to mitigate risk in any activity that potentially impacts the security of existing IT and information management
• Ability to provide monitoring and risk analysis of zero-day and other vulnerabilities
• Ability to correlate disparate datasets to identify abnormal behavior
• Ability to triage SIEM events and determine escalation of indicators
• Ability to apply NIST, federal, and DoD guidelines, policies, directives, and memos as they relate to Cyber Security
• Ability to pay strict attention to detail
• Possession of excellent analytical and collaboration skills
• CCNA or Network+ Certification
• Computing Environment Certification, including McAfee, Blue Coat, RedHat, or Cisco Additional Skills & Qualifications

Additional Qualifications:

• Knowledge of industry, government and DoD best practices, including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors
• Knowledge of DoD system solutions to mitigate risk in any activity that potentially impacts the security of existing IT and information management
• Ability to provide monitoring and risk analysis of zero-day and other vulnerabilities
• Ability to correlate disparate datasets to identify abnormal behavior
• Ability to triage SIEM events and determine escalation of indicators
• Ability to apply NIST, federal, and DoD guidelines, policies, directives, and memos as they relate to Cyber Security
• Ability to pay strict attention to detail
• Possession of excellent analytical and collaboration skills
• CCNA or Network+ Certification
• Computing Environment Certification, including McAfee, Blue Coat, RedHat, or Cisco Employee Value Proposition (EVP)

DFAS provide payment services to the department of defense and is the largest federal employer in the State of Indiana.
Resource within the cyber security team have access to excellent technical equipment and training, working with state of the art technology to support highly regulated and confidential data supporting the Department of Defense. Active Security clearance is required and the role provide an opportunity to keep a professional security clearance active while continuing to growth their career in the information security field. Work Environment
The CND Team works in a SCIF at Fort Benjamin Harrison in Indianapolis. Consultant will be required to leave cell phone and all other communication devices outside of the environment during work hours.

Hours: Panama Schedule, 12 hours shifts 12am - 12pm or 12pm - 12am shift. Alternating weekends. Will be determined during interview.