Security Operations Center (SOC) Analyst

Quantum Sky•Columbia, SC

2d•$105,000 - $115,000•Hybrid

About The Position

Quantum Sky is searching for a Security Operations Center (SOC) Analyst to support threat monitoring, detection, event analysis, and incident reporting. You will be responsible for monitoring enterprise networks and systems, detecting events, and reporting on any and all threats that are directed against those systems regardless of their classification level or type. Typically, the client’s sensor grid acquires millions of events per day and events are analyzed and categorized in accordance with the Cyber Security Incident Response Plan. The Incident Response Analyst will provide the client with a fully comprehensive array of analytical activities in support of external threat monitoring, detection, event analysis, and incident reporting efforts including presentation reviews, internal and external threat reporting, analysis of inbound and outbound public internet traffic, suspicious e-mail messages, administering access request to specific public sites, communicating and coordinating the characterization of events and the response.

Requirements

Bachelor’s Degree, or an equivalent combination of formal education, experience
Minimum of one (3) year of general work experience and two (2) year of relevant experience
Minimum one (1) year of experience as a Security/Network Administrator
Experience in some of the following tools and technologies: Trellix Endpoint Security, CrowdStrike EDR, Splunk Enterprise Security, SOAR, and UBA, Cisco Secure IPS/NGFW IPS, Cisco Secure Network Analytics
Strong analytical and organizational skills.
Strong verbal and written communication skills.
Experience with MS Word and other MS Office applications.
Active Top Secret clearance required

Nice To Haves

Experience working in a SOC and doing incident response is preferred.
Experience with securing various environments preferred.

Responsibilities

Provide support for complex computer network exploitation and defense techniques to include deterring, identifying, and investigating computer and network intrusions; providing incident response and remediation support
Perform comprehensive computer surveillance/monitoring, identifying vulnerabilities; provide recommendations to improve security posture, and maintain the agency's incident response plan and associated artifacts
Support cybersecurity training efforts and national security exercises, such as table-top exercises, functional exercises, and scenario-based exercises.
Provide technical support for a comprehensive risk management program identifying mission-critical processes and systems; current and projected threats; and system vulnerabilities.