Location work will be performed: VAO145 - Falls Church – VA
This is a hybrid role so some onsite work may be required.
Candidates must be local to the Falls Church VA area.
Job Description: SOC Analyst II
Job requirements:
Respond to Cyber Security Incidents, provide cyber threat analysis and reporting to support SOC and Program’s situational awareness
Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.
Job description:
Monitor network traffic for security events and perform triage analysis to identify security incidents.
Respond to computer security incidents by collecting, analyzing, preserving digital evidence and ensure that incidents are recorded and tracked in accordance with SOC requirements.
Work closely with the other teams to assess risk and provide recommendations for improving our security posture.
The ability to take lead on incident research when appropriate and be able to mentor junior analysts.
Experience managing cases with enterprise SIEM systems like Arcsight, Splunk or Sourcefire.
EXPERIENCE LEVEL:
3-5 years of related experience on a Computer Incident Response Team (CIRT), experience on a Computer Emergency Response Team (CERT), experience on a Computer Security Incident Response Center (CSIRC) or experience on a Security Operations Center (SOC).
EDUCATION:
Bachelor's degree in computer science, Information Technology or Information Security preferred or a technically related field OR equivalent related work experience
CERTIFICATIONS: (One or more desired)
CompTIA Security +
CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker GCIH - (GIAC Certified Incident Handler) or ECIH - (EC-Council Certified Incident Handler) CISA - Certified Information Systems Auditor
Additional Provisions:
Must be able to obtain a Position of Public Trust Clearance • Pass both a client mandated clearance process to include drug screening, criminal history check and credit check.
Once candidate’s resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process.
If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance.
All candidates must be a US Citizen or have permanent residence status (Green Card).
Candidate must have lived in the United States for the past 5 years.
Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
All overtime must be pre-approved in writing by the client manager or his/her designated representative.
Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time.