Security Operations Center Analyst

Booz Allen Hamilton•Columbia, MD

6d•Remote

About The Position

The Security Operations Center Analyst position offers a strategic role in cyber defense for U.S. Cyber Command, utilizing experience-based knowledge to protect critical warfighter infrastructure from cyber threats. This role involves advanced threat identification and complex incident response, analyzing logs, forensic data, and threat intelligence to detect advanced threats. The analyst will use their understanding of customer networks and cybersecurity experience to analyze patterns, understand attacker goals, and advise on network hardening. The goal is to outsmart malicious actors and protect U.S. Cyber Command.

Requirements

Experience with SIEM Fundamentals, including Splunk
Knowledge of basic networking fundamentals
Knowledge of the basic functions and configurations of Bro (Zeek)
Knowledge of Suricata or Snort
Ability to review Nessus scans and Firewall configurations
Ability to review Linux hosts for indicators of compromise and hardening of Linux systems
Ability to navigate nix based systems via CLI
Ability to find, read, and analyze various logs
TS/SCI clearance with a polygraph
HS diploma or GED and 6+ years of experience with incident response procedures and analysis, or Bachelor's degree and 2+ years of experience with incident response procedures and analysis

Nice To Haves

Experience with correlating threat intelligence (INTEL) to determine the threat actor, the attack's scope, and the affected systems
Experience with AI Fundamentals
Knowledge of Splunk Phantom or SOAR