Junior SOC Analyst (DoD Secret Clearance)

MartinFed•Huntsville, AL

1d•Onsite

About The Position

MartinFed is seeking a Junior SOC Analyst to support the NASA Security Operations Center (SOC). The analyst monitors, analyzes, categorizes, documents, and reports cybersecurity events and service requests from detection through resolution, following NASA standard operating procedures and established service-level timelines. The role includes identifying potential incidents, analyzing phishing and potentially malicious emails, applying knowledge of common attack techniques and networking fundamentals, and determining appropriate responses and escalations. The NASA SOC operates 24/7/365. Once fully trained, analysts work rotating shifts to support continuous coverage. Standard schedules are four 10-hour shifts, either Sunday–Wednesday or Wednesday–Saturday. Shift windows are day (7:00 AM–5:00 PM), evening (1:00 PM–11:00 PM), and night (9:00 PM–7:00 AM). The position is performed on-site at NASA Marshall Space Flight Center. MartinFed provides technology and workforce solutions to the U.S. government and describes investing in its employees and emphasizing continuous learning, improvement, humility, and excellence. Employment is contingent on passing a background check and drug screening before the start date; random drug screenings may occur during employment. MartinFed is an E-Verify employer and an Equal Opportunity/Affirmative Action Employer.

Requirements

U.S. citizenship and an active DoD Secret clearance.
Bachelor's degree.
Two years of directly related cybersecurity experience.
Strong understanding of cybersecurity fundamentals and concepts.
Strong understanding of email analysis and ability to identify potentially malicious or phishing emails.
Understanding of common cyberattack techniques and cybersecurity threats.
General networking knowledge, including TCP/IP, UDP, HTTPS, DNS, and other core protocols.
Demonstrated understanding of Cyber Defense principles.
Ability to recognize, categorize, prioritize, and appropriately escalate potential cybersecurity incidents.
Excellent communication and interpersonal skills.
Ability to work in a fast-paced, 24/7/365 Security Operations Center environment.

Nice To Haves

Familiarity with command-line environments across operating systems.
Experience working in a 24/7 security operations center.
Experience with SIEM, EDR, email security, or other cybersecurity monitoring tools.
Familiarity with phishing analysis and indicators of compromise.
Knowledge of basic incident response and cybersecurity investigation processes.
Desired certifications: SEC+, CySA+, or GCIH.

Responsibilities

Monitor, triage, document, and report cybersecurity events and incidents from initial detection through final resolution in accordance with NASA procedures and service-level timelines.
Analyze reported events to determine whether they represent legitimate cyber incidents or require further investigation.
Analyze phishing and potentially malicious emails, including suspicious senders, links, attachments, and other indicators of compromise.
Apply knowledge of common cyberattack techniques, cybersecurity threats, and Cyber Defense principles to support triage and escalation.
Submit and track service tickets for NASA SOC internally and with external organizations.
Monitor and log SOC Request/CNOC actions and responses.
Acknowledge service requests promptly and support problem identification, root cause analysis, escalation, resolution, and closure in accordance with SLAs and OLAs.
Categorize and prioritize cyber events and other SOC service requests according to established procedures.
Escalate incidents requiring in-depth analysis to SOC Incident Analysis.
Assist with network investigations of significant cybersecurity incidents and associated reporting.
Apply networking knowledge, including TCP/IP, UDP, HTTPS, and DNS, to cybersecurity event analysis and investigation.
Document and track incidents in NASA's authoritative incident management system according to reporting procedures.
Archive and maintain historical SOC data and incident records.
Provide situational awareness across NASA regarding cybersecurity issues affecting the enterprise, following NASA policies and procedures.
Communicate with SOC personnel, customers, and external organizations about cybersecurity events, incidents, and service requests.
Work rotating shifts once fully trained to support continuous SOC coverage.