Security Operations Center Analyst

Everwatch•Annapolis Junction, MD

1d•$58 - $67•Onsite

About The Position

EverWatch is a government solutions company providing advanced defense, intelligence, and deployed support to our country’s most critical missions. We are a full-service government solutions company. Harnessing the most advanced technology and solutions, we strengthen defenses and control environments to preserve continuity and ensure mission success. EverWatch employees are focused on tackling the most difficult challenges of the US Government. We offer the best salaries and benefits packages in our industry - to identify and retain the top talent in support of our critical mission objectives. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

Requirements

Experience with SIEM Fundamentals, including Splunk
Knowledge of basic networking fundamentals
Knowledge of the basic functions and configurations of Bro (Zeek)
Knowledge of Suricata or Snort
Ability to review Nessus scans and Firewall configurations
Ability to review Linux hosts for indicators of compromise and hardening of Linux systems
Ability to navigate nix based systems via CLI
Ability to find, read, and analyze various logs
TS/SCI clearance with a polygraph
HS diploma or GED and 6+ years of experience with incident response procedures and analysis, or Bachelor's degree and 2+ years of experience with incident response procedures and analysis

Nice To Haves

Experience with correlating threat intelligence (INTEL) to determine the threat actor, the attack's scope, and the affected systems
Experience with AI Fundamentals
Knowledge of Splunk Phantom or SOAR

Responsibilities

Analyze logs, forensic data, and threat intelligence to find advanced threats that are escaping detection.
Use deep understanding of customer networks, combined with cybersecurity experience, to analyze patterns to understand attackers’ goals and stop them from succeeding.
Advise on ways to close gaps and harden networks once an adversary is found in the SEIM’s blind spot.
Outsmart malicious actors and protect U.S. Cyber Command.