Information Security Analyst

TEKsystems•Rockville, MO

1d•Onsite

About The Position

The CIOCC Tier 3 Analyst is responsible for analyzing and responding to security events and incidents from various sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC), and other client data sources. This is a customer-facing role requiring excellent analytic and communication skills, delegation, and shared ownership of team processes. The analyst will also mentor Tier 1 & 2 analysts and act as a shift lead, supervising Tier 1s.

Requirements

3-5 years of experience in a security operations center environment, including demonstrated team leadership
Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity
Excellent written and verbal communication skills, with the ability to communicate technical details clearly
Experience with Splunk or similar SIEM tool, and CrowdStrike
Ability to obtain and maintain the required agency clearance

Nice To Haves

One or more certifications: CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN
IDS Log analysis skills
Packet Capture tools and analysis
Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP)
Military and/or prior U.S. Government support experience

Responsibilities

Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC) and other client data sources
Provide mentoring to Tier 1 & 2 analysts
Be lead for shift (supervising Tier 1s)