SOC Analyst (Evening Shift) / IT Specialist II

KBR, Inc. • Sioux Falls, SD

1d • Onsite

About The Position

KBR has an immediate need for an energetic and dynamic Security Operations Center (SOC) Analyst (evening shift), known as an Active Response Center (ARC) Analyst at EROS, in support of the United States Geological Survey (USGS) Earth Resources Observation & Science (EROS) Center (http://eros.usgs.gov/) near Sioux Falls, SD (http://www.siouxfalls.org). This position is an integral part of the EROS Center-wide Information Technology Team (CITT). The role involves working as part of a 24x7 Active Response Center (ARC) team, with responsibility for monitoring the networks for security issues (using SIEM/log analysis toolsets), performing vulnerability scanning, threat intelligence and undertaking security incident response. The purpose of this role is to ensure that the EROS Center’s information and systems are protected, in accordance with the needs of the business and according to Information Security principles of availability, integrity and confidentiality. The ARC operates 24x7 and you will be required to work a shift pattern that covers this. This consists of a mixture of evenings and nights, Monday through Friday and rotation of weekend shifts. This position is being posted as an evening shift, which starts at 4:00 pm to 12:45 am. Occasional travel may be required. The candidate must have previous 3 years US residency. This position may be filled by a KBR teammate on the TSSC Contract. Education: An AA or BS degree, or a degree in progress for IT related curriculum. Experience may be substituted for Education requirements, as applicable. Experience: Minimum of 1 year of directly related technical, professional experience required; additional experience of 4+ years is ideal. Experience and/or Education in lieu of these qualifications will be reviewed for applicability to meet these requirements.

Requirements

• Highly motivated individual with a genuine enthusiasm for information security and technology
• Willingness to work shifts (including unsociable hours and holidays where these fall into your shift pattern) as part of a 24x7 team.
• Sound understanding of information security principles and best practices
• Good infrastructure and technology experience including demonstrable understanding of security operations
• Good communication skills both written and verbal
• Good knowledge of security issues inherent in common corporate environments
• Ability to prioritize workloads and to know when to seek guidance
• Minimum of 1 year of directly related technical, professional experience required; additional experience of 4+ years is ideal.
• An AA or BS degree, or a degree in progress for IT related curriculum.
• The candidate must have previous 3 years US residency.
• The candidate must be able to obtain and maintain a national agency check and background investigation after hire to obtain credentials for facility access and user accounts.

Nice To Haves

• Work with 1st line ticketing/triage
• Experience using Security Incident and Event Management (SIEM) toolsets
• Experience using vulnerability scanning tools
• Experience identifying and reporting on open source threat intelligence
• Proven technical ability in Windows/Unix/Linux/etc
• Proven technical ability in Microsoft Windows/Active Directory
• Proven technical ability in networking systems
• Experience with Amazon cloud hosting platforms
• Experience with VMware virtualization
• Experience with malware analysis

Responsibilities

• Monitor the networks for malicious activity using Security Incident and Event Management (SIEM) toolsets. This will include responding to and investigating alerts, the development of new security monitoring use cases, and ensuring all investigative activity is properly documented in our ticketing systems and followed up with relevant support teams.
• Triage issues escalated to the information security team, and ensure that appropriate follow-up actions are taken by the ARC.
• Take responsibility for developing and maintaining ARC documentation and processes.
• Take responsibility for monitoring open source intelligence sources for potential threats against the EROS Center, and ensure appropriate defensive actions are taken with respect to these.
• Take responsibility for running vulnerability scans against EROS infrastructure, interpreting these and following up issues with relevant support team.

Benefits

• KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule.
• We support career advancement through professional training and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree
• Number of Employees: 5,001-10,000 employees