SOC Analyst (Secret Clearance)

ShorePoint•Denver, CO

2d•Onsite

About The Position

ShorePoint is seeking a Security Operations Center (SOC) Analyst to monitor and analyze potential cybersecurity threats and support security operations across enterprise systems and networks. The role performs security event monitoring, vulnerability scanning, configuration assessments, and security tool administration to identify risks and support remediation. It requires experience in cybersecurity operations, security monitoring technologies, and vulnerability management within a consulting environment. The position offers an opportunity to contribute to the growth and culture of ShorePoint, a cybersecurity services firm serving high-profile, high-threat public and private sector customers. The position is onsite in Denver, Colorado, or Crystal City, Virginia. Applicants must hold and maintain an active Secret clearance.

Requirements

Bachelor’s degree from an accredited university, preferably in an IT-related field.
One or more of the following certifications: CISSP, CISA, CISM, CompTIA Security+, or CAP.
At least 5 years of information technology and cybersecurity experience for a consulting organization, including skills and responsibilities relevant to the SOC role.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Must hold and maintain an active Secret clearance.
Knowledge of cybersecurity tools, including Splunk Enterprise Security, Q-Audit ICS-500-27 Splunk application, Tenable Nessus Security Center, Cylance, ExtraHop, and Burp Suite, or equivalent tools.

Nice To Haves

Previous DOJ experience.
Military experience.

Responsibilities

Monitor and analyze potential threat activity, identify security events and incidents using SIEM tools, and assess the effectiveness of existing security measures.
Provide real-time alerting and monitoring by capturing, indexing, and correlating security data to generate graphs, reports, alerts, and visualizations; produce metrics and diagnose security problems.
Provide engineering support, operations, and maintenance for security tools, including routine Tenable Security Center administration of user accounts, scan policies, and reports.
Conduct daily and ad hoc vulnerability scans of networks and systems, track and verify findings, and promote timely remediation or coordinate extension requests with stakeholders.
Conduct DISA STIG baseline configuration scans of hardware and network devices, including manual review of Category I and Category II findings that cannot be checked through automated scans.
Monitor incoming security events and maintain audit log management using Splunk.
Prepare vulnerability management metrics reports for senior leadership and participate in weekly operations and maintenance meetings to discuss vulnerability patch management.
Validate hardware and software inventories across a portfolio of systems and use advanced analytics to identify emerging threat patterns and vulnerabilities.
Provide technical support for vulnerability assessments, risk assessments, network security, product evaluations, and security implementation.
Conduct technical evaluations of customer systems, assist with security improvements, and recommend products, technologies, and upgrades to strengthen security posture.
Conduct security testing and audit log reviews.