CIOCC Tier 1 Analyst

Peraton•Rockville, MD

1d•$51,000 - $82,000

About The Position

We are Hirng! Our FDA Program is growing, and we are looking for a motivated and detail-oriented CIOCC Tier 1 Analyst to join our cybersecurity operations team. The CIOCC Tier 1 Analyst serves as the first line of defense in monitoring, analyzing, and responding to cybersecurity events and incidents. This role is critical in maintaining the security posture of our environment by identifying potential threats and ensuring timely escalation and response.

Requirements

Bachelor’s degree and 2 years of experience or 6 years with a HS diploma/equivalent
Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity
Excellent written and verbal communication skills required. Must be able to communicate technical details clearly
Splunk or similar SIEM tool
Must be a US Citizen
Must be able to obtain and maintain the required agency clearance

Nice To Haves

CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. – One or more preferred
IDS
Log analysis skills
Packet Capture tools and analysis
Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, SSO, DNS)
Familiarity with AI technologies and integration of AI into workflows is preferred
Prior military/government experience preferred

Responsibilities

Monitor and analyze security events from multiple sources, including SIEM, Firewalls (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Detection and Response (EDR), Network Access Control (NAC), and other client data sources.
Triage and respond to alerts in real time, identifying potential threats and escalating incidents based on severity and established procedures.
Perform initial incident validation, categorization, and prioritization.
Document, track, and manage security incidents within ticketing systems, ensuring accuracy and timeliness.
Collaborate with Tier 2 and Tier 3 analysts to support incident investigation, containment, and remediation.
Follow established standard operating procedures (SOPs) and incident response playbooks.
Correlate data across multiple security tools to identify suspicious patterns or malicious activity.
Maintain situational awareness through continuous monitoring of dashboards, alerts, and reports.
Contribute to process improvements by providing feedback on detection rules and workflows.
Ensure compliance with FDA security policies, standards, and regulatory requirements.