Senior SOC Analyst

Peraton•,

1d•$104,000 - $166,000•Remote

About The Position

Peraton is seeking a Senior SOC Analyst for its Department of State Bureau of Diplomatic Technology Consular Affairs Enterprise Infrastructure Operations program. The program provides IT operations and maintenance to modernize legacy networks, applications, and databases that support consular applications and services globally. This fully remote position requires flexibility to work first, second, and third shifts. Candidates in the Washington, DC metropolitan area are preferred for occasional onsite meetings, training, or customer support in Washington, DC, or Sterling, VA. Onsite frequency may change based on government or program needs, including periods requiring five days per week in the office.

Requirements

One of the following education and experience combinations: bachelor's degree and 8 years of experience; master's degree and 6 years; associate degree and 10 years; or high school diploma/equivalent and 12 years.
U.S. citizenship and an active SECRET security clearance.
Security+ CE or another DoD 8570 IAT Level II certification.
At least 5 years of cybersecurity, SOC, or systems security experience in a federal government environment supporting business-critical, high-availability systems.
At least 3 years of experience with a SIEM platform, preferably Splunk.
Experience using Splunk or similar dashboards and Microsoft Sentinel for security monitoring and analysis.
At least 4 years of experience querying and analyzing security data, including SPL, with a working understanding of data types, conditions, and regular expressions.
Working knowledge of system, network, and application security threats and vulnerabilities, and ability to support development and improvement of monitoring solutions.
Understanding of Boolean logic and event correlation.
Experience identifying logging and monitoring gaps and supporting efforts to improve security monitoring.
Working knowledge of cybersecurity incidents, anomaly analysis, log analysis, digital forensics, and common threat vectors.
Understanding of TCP/IP, UDP, network ports, protocols, and traffic flow.
Familiarity with cybersecurity frameworks and specifications, including RMF and NIST standards such as NIST SP 800-53.
Flexibility to work first, second, and third shifts.

Nice To Haves

Experience with Splunk data normalization, including field aliases, calculated fields, and field extractions.
Splunk Power User certification or higher.
Experience tracking incidents using the MITRE ATT&CK framework.
Knowledge of cloud security.
Experience with system administration, networking, and operating system hardening techniques.
Experience with Linux and Windows operating systems.
Experience troubleshooting storage-related issues.
Scripting or coding experience.
Knowledge of Web Application Firewall (WAF) security features.

Responsibilities

Monitor and investigate security alerts, conduct threat hunting, and notify designated managers, cyber incident responders, and cybersecurity service provider personnel of suspected incidents.
Communicate event history, status, and potential impact according to the organization's cyber incident response plan.
Analyze and characterize network traffic to identify anomalous activity and potential threats.
Create advanced ad hoc SPL queries.
Coordinate with internal and external teams to investigate threats, assess risks, and conduct forensic analysis.
Review host, network traffic, firewall, and IDS logs to identify potential security threats.
Use SIEM and EDR tools to monitor the operational environment.
Develop and document configuration standards, policies, and procedures for operating, managing, and securing system infrastructure.
Advise management and team members on technology risks and recommend mitigation strategies.
Provide technical expertise and thought leadership to multiple levels of management.
Prepare reports on investigations, incidents, and other security-related activities.
Identify and classify attack tactics and techniques.
Recommend and implement improvements to system performance, security, and reliability.
Build and refine SOC processes and procedures, including documenting work in SOPs.
Train and mentor junior SOC team members.
Plan and execute SOC-related projects and initiatives.
Communicate professionally with managers and colleagues.
Take on additional responsibilities as needed.

Benefits

Medical benefits
Dental insurance
Vision insurance
Life insurance
Health savings account
Short- and long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off for vacation
Company-paid holidays
Employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.