Cybersecurity Specialist III

Electrosoft•Memphis, TN

About The Position

The Cybersecurity Specialist III provides senior operational cybersecurity expertise supporting incident-management operations and SOC engineering and detection activities. This seasoned technical contributor applies deep technical knowledge to difficult or unclear problems, collaborating and analyzing potential impacts on end solutions. The role supports real-time alert monitoring and triage, incident report acceptance and coordination, incident analysis, containment, eradication and recovery, as well as SOC engineering, deployment, operations and maintenance. It may also include detection engineering, tuning and development of custom capabilities. The Specialist monitors and analyzes security alerts, logs, events, reports and other cybersecurity data; investigates alerts; documents incidents; and escalates potential incidents according to Government procedures. The position also supports SOC tool operations, technical integration, detection tuning, and development or maintenance of SOC analytics and related capabilities. Electrosoft Services, LLC provides technology-based solutions and services to federal customers, with areas of focus including cybersecurity, ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. The company describes a team-oriented workplace with meaningful work, growth opportunities, work-life balance, Lunch & Learn sessions and group activities.

Requirements

Bachelor's degree; alternatively, three additional years of experience may substitute for the degree.
Seven years of experience.
Deep technical knowledge and experience contributing to solutions for difficult or unclear technical problems.

Responsibilities

Conduct real-time monitoring and analysis of security alerts, logs, events and cybersecurity data.
Investigate alerts and perform initial incident triage and prioritization.
Conduct retrospective analysis based on threat intelligence, IOCs or Government direction.
Create and maintain incident cases, tickets, findings and associated documentation.
Receive, validate, document, coordinate and escalate cybersecurity incident reports.
Analyze suspected incidents to determine relevant activity, affected systems, IOCs, timelines, severity and potential impact.
Correlate data from logs, alerts, artifacts, reports and threat intelligence.
Develop and document recommended response and remediation actions.
Support containment, eradication, recovery and incident closure.
Support deployment, operation, maintenance, troubleshooting and sustainment of SOC capabilities.
Support rule, sensor, alert and analytic tuning.
Develop or maintain detections, analytics, dashboards, scripts, interfaces, automation playbooks and other SOC capabilities as assigned.