Security Operations Center (SOC) Analyst - PD Specialist

Deloitte • Arlington, VA

310d • $109,000 - $182,000

About The Position

Are you looking to elevate your cyber career? Your technical skills? Your opportunity for growth? Deloitte's Government and Public Services Cyber Practice (GPS Cyber Practice) is the place for you! Our GPS Cyber Practice helps organizations create a cyber minded culture and become stronger, faster, and more innovative. You will become part of a team that advises, implements, and manages solutions across five verticals: Strategy, Defense and Response; Identity; Infrastructure; Data; and Application Security. Our dynamic team offers opportunities to work with cutting-edge cyber security tools and grow both vertically and horizontally at an accelerated rate. Join our cyber team and elevate your career.

Requirements

• Must be legally authorized to work in the United States without the need for employer sponsorship now or at any time in the future
• Bachelor's Degree in Cybersecurity or related technical field
• 5 years of experience as a Security Analyst or Security Engineer, with at least 3 years of combined experience in security and network or systems operations
• Expertise in Incident Response, working in a 24/7 security operations center in a global security operations environment
• Experience with and knowledge of security tools and threat intelligence, including SIEM tools (Microsoft Sentinel preferred), EDR, Anti-Virus, Firewalls, network protocols, Windows security events, phishing mitigation, WireShark, and MS Office (especially Excel)
• Technical proficiency in relevant security concepts and technologies, including permissions management, DLP, Active Directory, VPN, Python (or similar high-level programming languages), CASB, SOAR, PowerShell, IPS, NAC, and UNIX shells
• Certification in one of the following: GREM, GCIA, GPEN, GCIH, Network+, Security+, or equivalent
• Active TS/SCI clearance with ability to obtain polygraph

Nice To Haves

• Master's Degree in Cybersecurity or related technical field
• Experience in government consulting and working directly with customers
• Active TS/SCI Clearance with polygraph

Responsibilities

• Manage and respond to security incidents, ensuring timely and effective resolution
• Identify and implement operational improvements to enhance security posture
• Collaborate with internal and external stakeholders to ensure comprehensive security measures
• Interpret threat intelligence and deploy countermeasures to mitigate risks
• Analyze data from various log sources and applications to perform security incident investigations, threat hunting, and vulnerability assessments
• Develop incident response processes - both manual and automated - including investigation, containment, mitigation, and recovery steps
• Conduct deep analysis of network and endpoint data to detect and mitigate potential risks
• Utilize threat intelligence sources and incorporate them into detection, enrichment, and mitigation automation
• Ensure adherence to security processes and identify areas for improvement

Benefits

• Discretionary annual incentive program based on individual and organizational performance
• Broad range of employee benefits including professional development opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree