SOC Analyst (5333)

SMX•Patuxent River, MD, MD

11d•$87,700 - $146,100•Onsite

About The Position

SMX is seeking a Journeyman-level SOC Analyst to support its NAWCAD customer onsite at Patuxent River Naval Air Station. The role focuses on cyber defense monitoring, detection, investigation, reporting, and mitigation support. The analyst uses security tools and data from across the enterprise to identify and assess threats, coordinate with cyber defense staff, and help ensure network designs and operations are secure from inception through production. The position requires a Top Secret clearance and the ability to maintain DoD-8140 compliance.

Requirements

Top Secret clearance required.
3–5 years of applicable work experience.
CompTIA Network+ certification.
Operating System certifications.
One or more of the following industry certifications or equivalent: GCIA, GCIH, GCDA, GSOC, GCED, or CYSA.
Must be able to maintain DoD-8140 compliance.

Nice To Haves

Linux OS experience.

Responsibilities

Detect, identify, and alert on possible attacks or intrusions, anomalous activities, and misuse, distinguishing these from benign activity.
Implement and manage security tools, including SIEMs, firewalls, IDS/IPS, threat and vulnerability management tools, data loss prevention tools, filtering technologies, traffic inspection solutions, reporting technology, and data analytics platforms.
Use cyber defense tools to continually monitor and analyze systems for malicious activity.
Document and escalate incidents, including their history, status, and potential impact, for further action.
Analyze malicious activity to determine exploited weaknesses, exploitation methods, and effects on systems and information.
Correlate events using information from a variety of enterprise sources to build situational awareness and assess the effectiveness of observed attacks.
Conduct research, analysis, and correlation across a wide variety of all-source data sets, including indications and warnings.
Receive and analyze network alerts from enterprise sources and determine possible causes.
Perform cyber defense trend analysis and reporting.
Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
Coordinate with enterprise-wide cyber defense staff to validate network alerts and analyze traffic anomalies using metadata.
Provide daily summary reports of network events and activity relevant to cyber defense practices.
Identify network-device applications and operating systems based on network traffic.
Research TTPs, IOCs, and signatures using OSINT and classified sources for monitoring and alerting.
Provide RMF/CONMON support to aid in mitigating findings.
Support engineering efforts to ensure network designs and operations are secure from inception to production.