Security Operations Center; SOC Analyst

Monitors dashboards and intrusion detection and prevention systems (IDS/IPS); performs initial analysis and investigation into alerts as they are seen (to include anti-virus and phishing alerts); performs initial malware analysis utilizing automated means; supports cyber defense functions to protect COH from cyber security incidents that have potential to cause negative impact; incident intake, ticket updates and reporting of cyber events; utilizes SOC monitoring devices (SIEM, IDS, DLP) to review and analyze pre-defined events indicative of incidents;

understanding, identifying and researching IOCs; uploading packets and evaluating source/destination activity and payloads; assists in recommendations for content to detect incidents, including IOCs for blocking and detection

Education:Bachelor's Degree in Engineering, Computer Information or Information Technology, Cybersecurity or Information Assurance or equivalent work experience of 5 or more years.
Certifications:GIAC Security Essentials:
Network, Endpoint & Cloud (GSEC), GIAC Advanced Security Essentials – Enterprise Defender (GCED), GIAC Blue Team Fundamentals:
Security Operations and Analysis (GSOC); GIAC Hacker Tools, Techniques, and Incident Handling (GCIH)