Security Operations Center Analyst (SOC) II

Job SummaryClient is seeking a Security Operations Center (SOC) Analyst II to support mission-critical cybersecurity operations through continuous network monitoring, security event analysis, incident detection and response, and the use of SIEM tools to maintain the security and availability of enterprise systems.

Are you ready to apply Make sure you understand all the responsibilities and tasks associated with this role before proceeding.
ResponsibilitiesThis role requires being onsite five days a weekMonitor all identified devices and applications via provided dashboards on program networksPerform event and incident management in accordance with established processes and proceduresConduct backup and recovery procedures as neededAnalyze network events within all program networksReport outages or incidents following guidelines and proceduresResponsible for security event monitoring utilizing SIEM toolsetsDetect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incidentUtilize security and operation analytics tools for log collection, analysis, and alertingPerform additional tasks or duties as directed by the NOSC LeadProvide Mobile Phone support to include activating and deactivating SIM cardsOther duties as assigned
QualificationsBachelor's degree. Associate's degree with 2+ years relevant experience or 4 years relevant experience may substitute2 years relevant experienceDoD Top Secret Clearance with SCI eligibility is requiredDoD IAT Level II Certification is requiredExperience investigating and responding to cybersecurity incidentsKnowledge of network protocols, operating systems, endpoint security, and cyber threat methodologiesStrong analytical, problem-solving, and communication skillsAbility to work effectively in a fast-paced, mission-critical environment.
Knowledge, Skills and AbilitiesExperience supporting a 24x7 SOC/NOSC environment for government or commercial clients.Hands-on experience with a variety of the following technologies:SplunkPalo Alto NetworksMicrosoft DefenderCarbon BlackCisco ASAF5FireEyeNetWitnessWiresharkNessusExtraHopOpenText NDRXSOARMcAfee ePOSnortStealthwatchIronPorttcpdumpFamiliarity with cyber threat intelligence, attack methodologies, and defensive cyber operations. xzbcwsv Understanding of network operating systems, service management processes, and operational performance metrics.