Business Title:
Security Operations Center Analyst II (SOC)Location:
Arlington, VirginiaClearance:
TS/SCI Eligible
Position SummaryDefinitive Innovative Solutions (DIS) is seeking a
Security Operations Center (SOC) Analyst II to support mission-critical cybersecurity operations through continuous network monitoring, security event analysis, incident detection and response, and the use of SIEM tools to maintain the security and availability of enterprise systems.
Duties and Responsibilities- This role requires being onsite five days a week
- Monitor all identified devices and applications via provided dashboards on program networks
- Perform event and incident management in accordance with established processes and procedures
- Conduct backup and recovery procedures as needed
- Analyze network events within all program networks
- Report outages or incidents following guidelines and procedures
- Responsible for security event monitoring utilizing SIEM toolsets
- Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident
- Utilize security and operation analytics tools for log collection, analysis, and alerting
- Perform additional tasks or duties as directed by the NOSC Lead
- Provide Mobile Phone support to include activating and deactivating SIM cards
- Other duties as assigned
Minimum Qualifications- Bachelor's degree. Associate's degree with 2+ years relevant experience or 4 years relevant experience may substitute
- 2 years relevant experience
- DoD Top Secret Clearance with SCI eligibility is required
- DoD IAT Level II Certification is required
- Experience investigating and responding to cybersecurity incidents
- Knowledge of network protocols, operating systems, endpoint security, and cyber threat methodologies
- Strong analytical, problem-solving, and communication skills
- Ability to work effectively in a fast-paced, mission-critical environment.
Knowledge, Skills and Abilities- Experience supporting a 24x7 SOC/NOSC environment for government or commercial clients.
- Hands-on experience with a variety of the following technologies:
- Splunk
- Palo Alto Networks
- Microsoft Defender
- Carbon Black
- Cisco ASA
- F5
- FireEye
- NetWitness
- Wireshark
- Nessus
- ExtraHop
- OpenText NDR
- XSOAR
- McAfee ePO
- Snort
- Stealthwatch
- IronPort
- tcpdump
- Familiarity with cyber threat intelligence, attack methodologies, and defensive cyber operations.
- Understanding of network operating systems, service management processes, and operational performance metrics.
