Security Operations Analyst

Cherokee Federal

1d•Remote

About The Position

This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered. The Security Operations Analyst provides monitoring, analysis, and response support within the Security Operations Center (SOC) to protect enterprise and critical infrastructure networks. This role focuses on identifying, investigating, and remediating security incidents using SIEM and other tools, supporting vulnerability management, developing and maintaining automated analysis capabilities, conducting risk assessments, and documenting and reporting security events. The analyst also assists in maturing SOC processes and ensures adherence to security policies, standards, and best practices.

Requirements

US Citizenship
Bachelor’s Degree in Computer Science, Information Technology or related engineering discipline or equivalent work experience in a related field.
Strong problem solving and root cause analysis skills
Minimum of 2-3 years’ experience supporting security operations center / service desk / call centers
Customer service focus, and strong interface/communication skills
Ability to ask relevant questions of customers and engineers in support of problem resolution.
Ability to work independently with little supervision.
Ability to follow procedures and work instructions to perform tasks
Identify process gaps and proactively improve system inefficiencies
Excellent written and verbal communication skills.
Ability to support shift work
Must pass pre-employment qualifications of Cherokee Federal

Responsibilities

Responsible for monitoring the network within the firewall (LAN)
Responsible for monitoring the network beyond the firewall (WAN)
Assist in establishing a mature and optimized Security Operations Center discipline to support managed security services focused on vulnerability and security information event management engagements.
Monitor and analyze Security Information and Event Management (SIEM) and other tools to identify security issues for remediation.
Monitor and analyze alerts and notifications from multiple security systems.
Provide near real-time monitoring of business centric risks to Constellation by identifying potential security incidents from security alerts
Gather comprehensive information and define requirements
Design - Develop automated cyber analysis based on requirements document
Implementation - Complete response operations playbook
Deliver - Solution for all security operations standards and policy guidelines Incident Reporting
CSOC support including conducting risk assessments and vulnerability analyses of industrial control systems to identify potential security threats and vulnerabilities and developing and implementing security protocols and procedures to safeguard critical infrastructure assets and prevent unauthorized access or tampering
Create weekly, monthly, and quarterly reports, or at frequency requested by customer
Organize and maintain documentation of detection capabilities
Develop, tune, and maintain tools to automate analysis capabilities for network-based, host-based and log-based security event analysis
Complete Cyber Monitoring and Incident Response Operations Playbook/Checklist activities
Performs other job-related duties as assigned