SOC Analyst - Tier 2

Evolver Federal•Leesburg, VA

1d•Onsite

About The Position

Evolver is seeking a SOC Analyst (Tier 2) to join our growing team in support of a large Security Operations program with our Federal client located in Leesburg, VA. This is an onsite day shift role working either Sunday-Wednesday or Sunday-Tuesday with 3 days on 4 off or 4 days on 3 off. We are looking for someone with experience working in a network security environment, such as a Security Operations Center (SOC), and who understands typical cybersecurity deliverables.

Requirements

Must be a United States (US) Citizen with a current DoD Secret Clearance.
Must be able to pass a comprehensive background check.
Minimum 5 years of overall experience cyber security experience
3 years experience with cybersecurity best practices.
Proficient with Microsoft Office Suite; specifically, Excel, Word, and Outlook a must.
Excellent verbal and written communication skills.
Excellent interpersonal, negotiation, and conflict resolution skills.
Excellent organizational skills and attention to detail.
Strong analytical, critical thinking, and problem-solving skills.
Ability to function well in a high-paced and at times stressful environment.
Ability to prioritize tasks and to delegate them when appropriate.

Nice To Haves

Experience with Splunk SIEM and Splunk SOAR
2 years of experience with scripting languages such as Python, PowerShell, Bash, or similar
Familiarization with following tools: Crowdstrike, Trellix Endpoint Security, Microsoft Defender and Tenable Nessus
Experience with incident response automation workflow creation.
Must have an impeccable work ethic, the ability to make sound decisions, and a commitment to integrity and accountability.
Strong supervisory and leadership skills.
One active Cyber Security Certification: (Sec+, CYSA+, CEH, or like)

Responsibilities

Initial response when a cyber incident is identified.
Remediation of incidents and escalation when necessary to Tier 3 support.
Initial assessment of the scope of the attack and affected systems.
Data collection for further analysis.
Dedicated monitoring and analysis of cyber security events by use of SOC tools.
Event of Interest (EOI) handling and escalation as appropriate.
Incident Response generation and reporting IAW established procedures.
Processing of incident communications to include initial reporting, follow-ups, requests for information and resolution activity.
Ensures daily, monthly, and quarterly compliance requirements are met individually and by professional level staff within the timelines provided by Operations executive leadership.