Cybersecurity Analyst

Booz Allen Hamilton Inc.•Indianapolis, IN

58d

About The Position

As a Security Operations Center (SOC) analyst, you're in the middle of the action, responding to and mitigating threats in real time. You're the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber-attacks for the DoD. As a SOC analyst on our team, you'll monitor and analyze threats using state-of-the-art tools. You'll use your cybersecurity skills to monitor, detect, and respond to cybersecurity alerts. You'll review logs, tool output, and intelligence sources, and investigate security events and follow escalation processes. You'll identify and recommend improvements, prepare reports and informational documents, and work in a team environment. You'll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You'll analyze incidents to figure out just how many systems are affected and assist recovery efforts. You'll combine threat intelligence, event data, and assessments from recent events, and identify patterns to understand attackers' goals to stop them from succeeding. Join us. The world can't wait.

Requirements

Experience with information systems
Ability to work within a team setting
Ability to work a rotating shift schedule supporting a 24/7 environment
Secret clearance
HS diploma or GED
Ability to obtain CySA+ Certification before start date

Nice To Haves

Experience with DoD STIGs and SRGs, and hardening guidance
Knowledge of ESS, ACAS, DoD SIEM platforms, or Microsoft Sentinel
Top Secret clearance
Bachelor's degree in Information Systems, Cybersecurity, or Engineering
DoD IAT III Certification

Responsibilities

Monitor and analyze threats using state-of-the-art tools
Use cybersecurity skills to monitor, detect, and respond to cybersecurity alerts
Review logs, tool output, and intelligence sources
Investigate security events and follow escalation processes
Identify and recommend improvements
Prepare reports and informational documents
Work in a team environment
Understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact
Analyze incidents to figure out just how many systems are affected and assist recovery efforts
Combine threat intelligence, event data, and assessments from recent events, and identify patterns to understand attackers' goals to stop them from succeeding