SOC Analyst (Secret Clearance)

ShorePoint•Denver, CO

1d•Onsite

About The Position

ShorePoint is seeking a Security Operations Center (SOC) Analyst to monitor and analyze potential cybersecurity threats and support security operations across enterprise systems and networks. The role performs security event monitoring, vulnerability scanning, configuration assessments, and security tool administration to identify risks and support remediation within a consulting environment. The analyst monitors security events and incidents using SIEM technologies, provides real-time alerting and monitoring, and supports security tools through engineering, operations, and maintenance. The position also conducts vulnerability and DISA STIG baseline scans, tracks findings and remediation, maintains audit log management, produces vulnerability management metrics, validates system inventories, and provides technical support for security assessments and improvements. The role is onsite in Denver, Colorado, or Crystal City, Virginia. Applicants must hold and maintain an active Secret clearance.

Requirements

Bachelor’s degree from an accredited university, preferably in an IT-related field.
One or more of the following certifications: CISSP, CISA, CISM, CompTIA Security+, or CAP.
At least 5 years of information technology and cybersecurity experience for a consulting organization, including skills and responsibilities relevant to the SOC role.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Must hold and maintain an active Secret clearance.

Nice To Haves

Previous DOJ experience.
Military experience.
Experience with cybersecurity tools such as Splunk Enterprise Security, Q-Audit ICS-500-27 Splunk application, Tenable Nessus Security Center, Cylance, ExtraHop, Burp Suite, or equivalent tools.

Responsibilities

Monitor and analyze potential threat activity, identify security events and incidents using SIEM tools, and assess the effectiveness of existing security measures.
Capture, index, and correlate security data to provide real-time alerting and monitoring; generate graphs, reports, alerts, and visualizations; produce metrics; and diagnose security problems.
Provide engineering support, operations, and maintenance for security tools, including routine Tenable Security Center administration of user accounts, scan policies, and reports.
Conduct daily and ad hoc vulnerability scans of networks and systems, track and verify findings, promote timely remediation, and coordinate extension requests with stakeholders.
Conduct DISA STIG baseline configuration scans of hardware and network devices, including manual reviews of Category I and Category II findings that cannot be checked through automated scans.
Monitor incoming security events and maintain audit log management using Splunk.
Prepare vulnerability management metrics reports for senior leadership and participate in weekly operations and maintenance meetings about vulnerability patch management.
Validate hardware and software inventories across a portfolio of systems and use advanced analytics to identify emerging threat patterns and vulnerabilities.
Provide technical support for vulnerability assessments, risk assessments, network security, product evaluations, and security implementation.
Conduct technical evaluations of customer systems, assist with security improvements, and recommend products, technologies, and upgrades to strengthen security posture.
Conduct security testing and audit log reviews.