Cybersecurity Operations Center Analyst

Booz Allen Hamilton•Fort Bragg, NC

4h•Remote

About The Position

As a Cybersecurity Operations Center Analyst on our security operations center team, you’ll improve tier monitoring strategies and analyze threats using state-of-the-art tools and platforms. You’ll work with the team to comprehend, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You’ll manage efforts to figure out just how many systems are affected and assist recovery efforts. You’ll combine threat intelligence, event data, and assessments of events to identify patterns to understand attackers’ goals to stop them from succeeding. This is a great opportunity to continue to build your cybersecurity skills with hands-on experience in threat assessment and incident response. Join us as we protect clients from malicious actors.

Requirements

3+ years of experience working in a professional environment
Experience using endpoint tools to successfully hunt for adversarial behavior
Knowledge of SIEMS and using content from SIEMS, including responding to alerts and creating or evaluating dashboards
Knowledge of network data and analyzing full packet capture
Ability to analyze network and endpoint logs
Ability to conduct incident response
Ability to effectively report incident information to leadership
TS/SCI clearance
HS diploma or GED
DoD 8570 IAT II+ Certification

Nice To Haves

Experience working in a Security Operations Center (SOC) or Regional Cyber Center (RCC)
Experience conducting digital forensics
Bachelor's degree
Splunk, Tanium, Trellix, Pentesting, Programming or Scripting, or MDE Certification
DoD 8570 CSSP Analyst or Incident Responder Certification

Responsibilities

Improve tier monitoring strategies
Analyze threats using state-of-the-art tools and platforms
Comprehend, mitigate, and respond to threats quickly
Restore operations and limit the impact of threats
Manage efforts to determine the number of affected systems
Assist recovery efforts
Combine threat intelligence, event data, and assessments of events to identify patterns
Understand attackers' goals to stop them from succeeding
Conduct threat hunting using network and host-based information