SOC Analyst

Tactibit Technologies, LLC
Suitland-Silver Hill, MD, United States
2 days ago
Apply on www.careerbuilder.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
6 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services Data Analysis Confluence JIRA Microsoft Azure Cloud Computing Security Cyber Security Databases Monitoring of Systems Internet Security Intrusion Detection and Prevention Intrusion Detection Systems
+17 more
Python (Programming Language) Network Security Log Analysis ArcSight SIEM Tool Security Information and Event Management Technical Data Management Systems Tripwire Scripting QRadar Cyber Threat Analysis Firewalls (Computer Science) Information Technology Nessus Appscan Splunk Blue Team (Cyber Security) Vulnerability Analysis

Job description

We are seeking a proactive and detail-oriented Security Operations Center (SOC) Analyst to join our team enhance our cybersecurity operations. As a SOC Analyst, you will monitor, detect, and respond to cybersecurity threats and incidents across critical federal government mission systems and networks. You will work in a fast-paced environment as part of a team dedicated to maintaining the highest levels of security for critical government missions. Your role will include analyzing security event data, escalating potential threats, and contributing to continuous security improvements.

What you’ll do

  • Monitor security information and event management (SIEM) systems for alerts, anomalies, and incidents.
  • Conduct real-time threat analysis and triage security events to determine their impact and urgency.
  • Investigate and respond to security incidents by following established procedures and playbooks.
  • Analyze and report on vulnerabilities using Tenable SecurityCenter and similar tools.
  • Help collect and integrate data from disconnected mission system environments to develop centralized visibility.
  • Perform log analysis and review data from various tools, including intrusion detection/prevention systems (IDS/IPS), firewalls, and endpoint protection solutions.
  • Provide detailed incident reports and recommend mitigation strategies to reduce future risk.
  • Assist in the tuning and optimization of SOC tools and technologies to enhance detection capabilities.
  • Participate in red/blue team exercises and simulations to improve SOC readiness.
  • Support compliance and audit activities by maintaining incident response logs and reports.
  • Stay current with the latest cybersecurity trends, tools, and techniques to ensure an effective response to evolving threats.

Requirements

Analysis Skills, Analysis Skills, Internet Security, Federal Government, Government, Security Analysis, Detail Oriented, Data Analysis, Security Information and Event Management (SIEM), Security Monitoring, * Proficiency in vulnerability and endpoint management tools such as Tenable SecurityCenter/Nessus, AppScan, BigFix, and Trellix ePolicy Orchestrator.

  • Familiarity with SIEM tools such as Tripwire Log Center, Splunk, ArcSight, QRadar, or similar platforms.
  • Experience with endpoint detection and response (EDR) solutions and vulnerability scanning tools.
  • Knowledge of incident response frameworks and procedures.
  • Hands-on experience with scripting and/or automating data review, analysis, and reporting using Python or similar languages and databases.
  • Experience supporting new federal government directives such as CISA Binding Operational Directives (BOD) and Emergency Directives (ED).
  • Knowledge of intrusion detection and prevention systems, firewalls, and other network security technologies.
  • Experience with Jira, Confluence, and other workflow, project management, collaboration, and system administration/monitoring tools.
  • Strong understanding of federal cybersecurity compliance frameworks, such as FISMA, RMF, or NIST 800-53.
  • Knowledge of operational challenges in complex or isolated networks.
  • Strong analytical skills and the ability to interpret complex technical data.
  • Excellent written and verbal communication skills for reporting and collaboration.
  • Experience working in federal government environments, especially NOAA or similar mission-oriented, scientific, or space-based programs, is highly preferred.
  • Familiarity with cloud security frameworks (AWS, Azure, or other platforms) is preferred., * BS in Cybersecurity, Computer Science, Engineering, related disciplines or equivalent.
  • 6+ years of experience in a SOC environment or similar cybersecurity role.
  • At least one relevant security or incident response certification from ISC2, ISACA, CompTIA, or GIAC such as CISSP, GCIH, CEH, or Security+.

Must be a U.S. Citizen or Permanent Resident who has lived in the United States for at least 3 of the last 5 years and be able to pass a background investigation to obtain a security badge to access applicable government facilities and systems.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerbuilder.com
Prepare application

Good distractions

Loading talks and stories from around this role…