Security Operations Center Analyst

About Coalfire Coalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers. Coalfire Federal along with its parent company, Coalfire, has an unparalleled client list with deep customer relationships with leading cloud and technology providers including Amazon, Microsoft, IBM, Google and Oracle and Federal agencies. Coalfire has been a cybersecurity thought leader for over 20 years and has offices throughout the United States and Europe and is committed to making the world a safer place by solving our clients’ toughest security challenges. But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. We’re currently seeking a skilled SOC Analyst with an active Secret or Top Secret clearance to support our on-site team in Denver, Colorado. Location Details This is a full time on site position with our Coalfire Federal team supporting a government customer. Open to local candidates residing in Colorado who are able to report to government client site location in Denver, CO. Summary The SOC Analyst will be responsible for assisting with the vulnerability management program and maintaining the vulnerability scanning tool, conducting incident response to include contributing to process improvement, and assist with monitoring existing alerts and security dashboards What you'll do Monitors and analyzes for potential threat activity. Provides real-time alerting and monitoring by capturing, indexing, and correlating data in a searchable repository to generate graphs, reports, alerts and visualizations. Provides metrics, diagnoses security problems. Provides engineering support, operations, and maintenance of security tools. Utilizes Security, Information, and Event Monitoring (SIEM) tools to identify security events and incidents to evaluate the effectiveness of current security measures. Maintains Tenable Security Center administrator responsibilities, routine maintenance of the front end including but not limited to user accounts, scan polices, and reports. Conducts daily and ad-hoc vulnerability scanning on networks and systems. Prepares reports of metrics for vulnerability management that is briefed to senior leadership to convey network security status. Participates and contributes to weekly meetings with O