Security Operations Center (SOC) Analyst

Peraton•Stennis Space Center, MS

23h•Onsite

About The Position

Peraton is seeking an experienced Security Operations Center (SOC) Analyst to join our team. The ideal candidate will have years of experience working in a multi-tenant SOC environment, demonstrating expertise in cyber incident response, Splunk, and networking technologies. The role requires shift work, and remote or telework is not permitted. All work will be performed onsite at our government facility in Mississippi. Day to Day Work Responsibilities may include: Monitor, detect, and respond to security incidents and events within a multi-tenant SOC. Conduct thorough investigations using Splunk, including writing and optimizing Splunk queries. Participate in and lead cyber incident response efforts, coordinating with various stakeholders. Analyze and interpret security logs, alerts, and reports to identify potential threats and vulnerabilities. Collaborate with network and systems teams to enhance security posture and address vulnerabilities. Utilize the SWIMLANE tool to automate and streamline security operations processes (preferred). Maintain up-to-date knowledge of emerging threats, vulnerabilities, and security technologies. Prepare detailed incident reports, including root cause analysis and recommendations for remediation.

Requirements

Bachelors degree and 2 years of experience or high school diploma/equivalent and 6 years of experience
US Citizenship required; must have the ability to obtain/maintain a DHS Public Trust (EOD)
Must have experience working in a multi-tenant SOC environment.
Proficient in Splunk, with the ability to write complex queries and conduct investigations.
Strong understanding of networking technologies and protocols.
Demonstrated experience in cyber incident response, including leading response efforts.
Ability to work shifts, with all work performed onsite at the government facility.

Nice To Haves

Active DHS Public Trust clearance
Experience with the SWIMLANE tool.
Strong analytical and problem-solving skills.
Excellent communication and collaboration abilities.
Ability to work effectively in a high-pressure, dynamic environment.
Commitment to continuous learning and professional development

Responsibilities

Monitor, detect, and respond to security incidents and events within a multi-tenant SOC.
Conduct thorough investigations using Splunk, including writing and optimizing Splunk queries.
Participate in and lead cyber incident response efforts, coordinating with various stakeholders.
Analyze and interpret security logs, alerts, and reports to identify potential threats and vulnerabilities.
Collaborate with network and systems teams to enhance security posture and address vulnerabilities.
Utilize the SWIMLANE tool to automate and streamline security operations processes (preferred).
Maintain up-to-date knowledge of emerging threats, vulnerabilities, and security technologies.
Prepare detailed incident reports, including root cause analysis and recommendations for remediation.