Tier I Security Operations Center (SOC) Analyst

General Dynamics Information Technology•Bossier City, LA

6d•$65,611 - $88,767•Onsite

About The Position

GDIT is seeking a Tier I Security Operations Center (SOC) Analyst to support the Virginia Information Technology Agency (VITA) as part of its Technology Shared Services 24x7x365 SOC team. The analyst performs initial triage and escalation of security alerts from hardware, software, intelligence sources, virtual systems, and virtual applications. The role requires adaptability and the ability to learn and use third-party toolsets to help secure client environments. The position is on-site at GDIT’s Integrated Technology Center in Bossier City, Louisiana, and requires 12-hour rotating shifts in a 24/7 environment. GDIT describes its work as supporting cyber missions and operations across the federal government. The company has 26,000 experts and operates in more than 50 countries. The advertised salary range is $65,611–$88,767; actual compensation may vary based on experience, geographic location, and contractual requirements.

Requirements

Technical training, certification(s), or a degree, combined with equivalent years of experience, must equal four years.
Zero or more years of experience.
At least one qualifying certification for DoD CSSP Analyst requirements: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+, or CompTIA Security+.
Ability to obtain and maintain CompTIA CySA+, Splunk Core Certified User, CompTIA Security+, or Splunk Core Certified Power User certification within six months of hire.
Willingness to work 12-hour rotating shifts on a Panama schedule in a 24/7 on-site environment in Bossier City, Louisiana.
Must be a U.S. citizen or U.S. person (lawful resident, refugee, or asylee).

Nice To Haves

One or more years of relevant experience.
Certification(s) and/or experience with a SIEM or log aggregation system.
Strong analytical, organizational, and project management skills.
Understanding of networking fundamentals, the OSI model, and TCP/IP protocols.
Knowledge of attack methods and techniques, such as DDoS, brute force, and spoofing.
Experience reviewing network, host, and application audit logs, including system and security logs.
Familiarity with security standards including NIST, FISMA, FedRAMP, DCID, CNSS, and DoD 8500.
Knowledge of cloud IT solutions and security considerations for cloud solution deployment.
Other relevant cybersecurity certifications.

Responsibilities

Provide technical support for event network security logs and trend analysis.
Detect a broad range of known cyberattacks, including DDoS, malware, and phishing.
Identify and pinpoint security violations involving compromised systems and devices.
Correlate security events from different capabilities to identify attacks and breaches.
Analyze and act on intelligence information to secure customer networks and devices.
Observe, document, and report actions taken by malicious actors in customer networks.
Maintain a current understanding of cybersecurity best practices and strategies.
Encourage self and coworkers to expand their knowledge and capabilities.

Benefits

Comprehensive benefits and wellness packages.
401(k) plan with company match.
Competitive pay.
Paid time off, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Medical plan options, including some with Health Savings Accounts.
Dental plan options.
Vision plan.
Full flexible work weeks where possible.
Short- and long-term disability benefits.
Life insurance.
Accidental death and dismemberment coverage.
Personal accident, critical illness, and business travel and accident insurance.