Mid-Level SOC Analyst

Keylogic Systems • Alexandria, VA

276d • $75,000 - $85,000

About The Position

KeyLogic, LLC is currently seeking a Mid-level Security Operation Center Analyst (SOC) to support a federal SOC program. The program provides comprehensive Security Monitoring and Incident Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise. The team conducts event triage and security investigations for potential threat activity identified within the organization, conduct deep-dive forensic investigations (host-based and network), identify and implement countermeasures, as well as track and report on incident activity to senior management. To support this vital mission, the staff is on the forefront of providing SOC Operations to include the development of advanced analytics and countermeasures to protect critical assets from various cyber threats. To ensure the integrity, security and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, analysis and incident response. A strong work ethic, diligent time and attendance, written and verbal communications skills are a must. The ideal candidate will have a solid understanding of cyber threats and information security in the domains of TTP's, Threat Actors, Campaigns, and Observables. Additionally, the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management. Corporate duties such as solution/proposal development, corporate culture development, mentoring employees, supporting recruiting efforts, will also be required.

Requirements

• 3+ years of experience working in network defense environments.
• Bachelor's Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering.
• Strong analytical and technical skills in computer network defense operations.
• Ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting, and Malware Analysis.
• Experience analyzing information technology security events to discern legitimate security incidents.
• Hands-on experience with Security Information and Event Monitoring (SIEM) platforms and/or log management systems (preferably IBM Qradar or Splunk).
• Strong logical/critical thinking abilities in analyzing security events.
• Proficiency with report writing and excellent verbal and written communications skills.
• Excellent organizational skills and attention to detail in tracking activities within Security Operation workflows.
• Working knowledge of various operating systems (Windows, OS X, Linux) and network communications and routing protocols.

Nice To Haves

• Ability to develop rules, filters, views, signatures, and operationally relevant applications and scripts.
• Familiarity with coding and scripting languages (BASH, Powershell, Python, PERL, RUBY) or software development frameworks (.NET).
• One or more certifications for CND Analysts (e.g., GCIA, GCIH, GCFA, CISSP).

Responsibilities

• Support a federal SOC program with comprehensive Security Monitoring and Incident Response.
• Conduct event triage and security investigations for potential threat activity.
• Perform deep-dive forensic investigations (host-based and network).
• Identify and implement countermeasures for security incidents.
• Track and report on incident activity to senior management.
• Develop advanced analytics and countermeasures to protect critical assets from cyber threats.
• Engage in corporate duties such as solution/proposal development and mentoring employees.

Benefits

• Salary range of $75,000 - $85,000.
• Full-time employment with a commitment to employee development and success.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree