Tier 1 SOC Analyst

Leidos

About The Position

Seeking a motivated Security Operations Center (SOC) Tier 1 analyst to join the SOC Team with the FTC. As a Tier 1 analyst, you will play a critical role in monitoring and analyzing security events to identify potential threats and respond to incidents promptly. Your primary responsibility will be to triage and escalate security events, ensuring system and network assets remain secure.

Requirements

BS in Information Security, Computer Science, or related field
Ability to obtain public trust clearance
1-2 years of experience in cybersecurity
Candidates must be adept at detailed reporting of incidents, threats, and false positives.
Candidates must show a commitment to continuous learning and staying updated with cybersecurity trends
Understanding of SIEM alerting and analytic processes
Capable of solving technical problems following established procedures and policies.

Nice To Haves

Value candidates who have led cybersecurity awareness trainings.
Seek candidates who stay informed on latest cybersecurity developments.
Looking for experience in developing or customizing security tools.
Candidates who have experience in monitoring the following security logs: Endpoint, Network, and Cloud.
Understanding of CKC, MITRE ATT&CK, or other Cyber Security frameworks

Responsibilities

Incident Management: Monitor network traffic for unusual activity and respond to threats or escalate to Tier 2.
Threat Tracking: Maintain awareness of ongoing cyber threats over time.
Threat Detection: Constantly monitor systems and networks for signs of intrusion, malware, or other security risks.
Reporting: Document incidents, threats, and false positives in detail.
Vulnerability Management: Update and maintain documentation on current vulnerabilities, and escalate to primary shareholders for critical vulnerabilities.
Communication: Relay information about current threats and incidents to team members and stakeholders.
Collaboration: Continuously share knowledge and contribute to improvement of SOC tools and processes.
Continuous Learning: Stay updated with the latest cybersecurity threats and defense strategies through continuous learning and training.