Security Operations Analyst (SOC)

Role: IT Security (SOC) Location: Herndon, VA (100% onsite) Duration: 12 Months Job Description: Responsible for monitoring security controls for information systems. Monitors networks against unauthorized infiltration, modification, destruction or disclosure. Enforces and communicates established security policies or plans for data, software applications, hardware and telecommunications. Configures and maintains all network security configurations. Performs tests on company's firewalls and intrusion detection systems. Exhibits an understanding of commonly used security controls and best practices. Overall Summary Entry-level support individual contributor. Work is closely supervised. Work consists of tasks that are routine. Explains facts and practices related to job area. Nature of Supervision Works with close supervision on routine tasks. Detailed instructions are provided and close peer review is required. Communication & Influence Communicates with contacts typically within the team on matters that involve obtaining or providing information requiring explanation or interpretation to understand and reach agreement. Innovation & Complexity Work consists of tasks that are routine. Work is structured within identified boundaries and procedures. Follows established processes to complete tasks. Escalates issues to supervisor for resolution. Organization Impact Works to achieve operational targets within job area which has minimal impact on the overall achievement of results for the team. Work is of limited scope, typically on smaller, routine task-related activities. Education & Experience Requires a High School Diploma or equivalent with 0 to 3 years of prior related experience with one of the following certifications (A+, Network +, Security +, Linux +). Prior SOC experience. The ideal candidate will possess the following qualifications: 1. Proven analytical and technical skills in computer network defense operations, ability to follow standard processes for Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis. 2. Prior experience with analyzing information technology security events to discern events that qualify as a legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, and following escalation procedures for incident response. 3. Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts. 4. Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, Linux syslog and audit, network traffic, IDS events for malicious intent, SIEM alerts). 5. Strong verbal and written communications skills and ability produce clear and thorough security incident reports and briefs. 6. Excellent attention to detail in tracking activities within various Security Operation workflows. 7. Familiarity with tools such as Splunk, Splunk Enterprise Security, Splunk User Behavior Analytics, Tenable.sc, Cisco Firepower, McAfee Endpoint Security, McAfee e-Policy Orchestrator, and Active Directory. 8. Ability to work onsite, 40 hours per week (occasional night and weekend work required). Off-hours on-call support required 1 week per month. 9. Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting (preferably within Splunk. 10. Must be able to obtain an FAA Public Trust Cl Job Types: Contract, Full-time Pay: Up to $36.00 per hour Compensation Package: Weekly pay Schedule: 8 hour shift Monday to Friday Ability to commute/relocate: Herndon, VA 20170: Reliably commute or planning to relocate before starting work (Required) Experience: Security operations: 2 years (Preferred) SoC: 2 years (Preferred) legitimate security incidents: 2 years (Preferred) (A+, Network +, Security +, Linux +): 2 years (Preferred) Work Location: In person