SOC Analyst

SAIC is seeking a SOC Analyst to join our team providing Security Operations Services. This position is a member of the 24x7-security operations team., * Provide 24x7 monitor and analysis of SIEM events to identify potential security risks and vulnerabilities

• Triage events and investigate to identify security incidents
• Log security incidents in the IT ticketing system
• Manage security incidents throughout their lifecycle to closure
• Coordinate with other, remote technical teams to investigate, document, and resolve issues
• Make recommendations for ongoing tuning and updates to the SIEM system
• Receive input from threat intelligence sources and analyze events to identify threats and risks
• Provide support for routine reporting
• Support ad-hoc data and investigation requests
• Conduct security and vulnerability scans as directed using established processes

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Experience in lieu of degree will be considered
• Four (4) years' experience; Experience and with relevant certification(s) in lieu of education will be considered Minimum of 1 year of experience in a SOC environment or a related cybersecurity role is desired. 2+ years in an IT role
• Relevant cybersecurity experience including SIEM operations, event management and incident management or relevant cyber certifications and training in lieu of experience
• Excellent oral and written communication skills
• Experience with Microsoft Office including Word and PowerPoint
• Must be able to obtain a public trust, United States citizenship required, * Experience with ITIL, ITIL certification
• Security knowledge in specialized functions equivalent to Sec+ or similar
• Cybersecurity certification (e.g. CompTIA Security+, CISSP, CEH, etc.)
• Networking knowledge equivalent to Net+ or CCNA is a plus
• Experience with SIEM software and GenAI prompting preferred
• Acquaintance with, and understanding of, practical application of HIPAA, FERPA, PIA, CJIS, NIST 800-53, ISO 27001, and others, as they may apply to the security and protection of customer, constituent and corporate data
• Experience with reporting and reporting tools