Security Operations Center Analyst (SOC) II

Definitive Innovative Solutions•Arlington, VA

1d•Onsite

About The Position

Definitive Innovative Solutions (DIS) is seeking a Security Operations Center Analyst II to support mission-critical cybersecurity operations. The role involves continuous network monitoring, security event analysis, incident detection and response, and use of SIEM tools to help maintain the security and availability of enterprise systems. The position is onsite five days a week in Arlington, Virginia, and requires a DoD Top Secret clearance with SCI eligibility. The analyst monitors program networks, investigates events and incidents, performs incident response in accordance with established procedures, and uses security and operational analytics tools for log collection, analysis, and alerting. The role also includes backup and recovery procedures, reporting outages or incidents, coordinating with stakeholders during incident response, and providing mobile phone support such as SIM card activation and deactivation. Additional tasks may be assigned by the NOSC Lead.

Requirements

Bachelor's degree; an associate's degree with at least 2 years of relevant experience or 4 years of relevant experience may substitute for the degree requirement.
DoD Top Secret clearance with SCI eligibility.
DoD IAT Level II certification.
Experience investigating and responding to cybersecurity incidents.
Knowledge of network protocols, operating systems, endpoint security, and cyber threat methodologies.
Strong analytical, problem-solving, and communication skills.
Ability to work effectively in a fast-paced, mission-critical environment.

Nice To Haves

Experience supporting a 24x7 SOC/NOSC environment for government or commercial clients.
Hands-on experience with one or more of the listed technologies: Splunk, Palo Alto Networks, Microsoft Defender, Carbon Black, Cisco ASA, F5, FireEye, NetWitness, Wireshark, Nessus, ExtraHop, OpenText NDR, XSOAR, McAfee ePO, Snort, Stealthwatch, IronPort, and tcpdump.
Familiarity with cyber threat intelligence, attack methodologies, and defensive cyber operations.
Understanding of network operating systems, service management processes, and operational performance metrics.

Responsibilities

Monitor identified devices and applications through provided dashboards on program networks.
Perform event and incident management in accordance with established processes and procedures.
Conduct backup and recovery procedures as needed.
Analyze network events across program networks.
Report outages or incidents according to guidelines and procedures.
Monitor security events using SIEM toolsets.
Detect, analyze, and respond to incidents, coordinating with stakeholders to contain, eradicate, and recover from incidents.
Use security and operational analytics tools for log collection, analysis, and alerting.
Perform additional tasks or duties as directed by the NOSC Lead.
Provide mobile phone support, including activating and deactivating SIM cards.
Perform other duties as assigned.