Monitoring and analyzing network traffic, Intrusion Detection Systems (IDS), security events and logs
Prioritizing and differentiating between potential intrusion attempts and false alarms.
Develop, maintain, and follow SOC Standard Operating Procedures (SOPs)
Support daily and monthly situation reporting per shift.
Proactively reviewing large data sets for anomalous activity
Create detective content for monitoring devices such as IDS and SIEM and advise on proactive blocks for security architecture.
Creating and tracking security investigations to resolution
Composing security alert notifications and other communications
Advising incident responders in the steps to take to investigate and resolve computer security incidents.
Staying up to date with current vulnerabilities, attacks, and countermeasures
Be able to multitask and give equal attention to a variety of functions while under pressure.
High school diploma or GED
Two (2) years' experience in
security and handling incident response in a professional work
environment.
Must have hands-on experience working in a SOC.
Certified Ethical Hacking (CEH) certification or
CompTIA CySA+ AND any
from the CSSP Analyst, Infrastructure Support, or IR from the DOD
8570 list (or other similar certifications as approved by Government)
Secret Clearance (active)
Possibility of shift work
