SOC Analyst

Tuknik Government Services, LLC, a Koniag Government Services company , is seeking a SOC Analyst to support TGS and our government customer Baltimore, MD. This position requires the candidate to be able to obtain a Public Trust.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

The ideal candidate will be able to obtain a Public Trust Clearance. This position involves providing 24/7/365 monitoring and analysis of security event alerts across the enterprise network. The SOC Analyst will monitor agency systems and daily log events to identify potential security threats, utilizing various sources such as sensor alert logs, firewall logs, content filtering logs, and Security Information and Event Management logs.

This role requires reviewing all incoming alerts, investigating, and ticketing all identified potential security threats using the agency's incident response-ticketing platform. The SOC Analyst will validate traffic and/or network activity as anomalous according to agency standards and procedures, and will identify, investigate, and escape potential security threats to senior agency resources when necessary. The position also involves measuring and modeling traffic, identifying patterns and ports, and producing reports, both contractual and ad hoc, providing information on events, trends, issues, and activity as requested by the federal customer.

Additionally, the SOC Analyst will provide data for inclusion in the agency’s CISA Report and investigate Open-Source Threat Intelligence for the agency. The role may also require the creation of new intrusion detection signatures as needed.

Work in a Security Operations Center (SOC) environment, providing detailed documentation of reported incidents utilizing Service Now. The candidate will function as a SOC Analyst performing triage, investigations, and responding to a wide variety of alerts.

Shift: Tuesday to Saturday from 6am to 230pm

All employees are considered mission critical and are expected to report even during inclement weather conditions .

Essential Functions, Responsibilities & Duties may include, but are not limited to:

• Providing 24/7/365 monitoring and analysis of security event alerts across the enterprise network.

• Monitoring agency systems and daily log events to identify potential security threats. Sources include, but not limited to, sensor alert logs, firewall logs, content filtering logs, and Security Information and Event Management logs.

• Reviewing incoming alerts, investigating, and ticketing all identified potential security threats using agency incident response ticketing platform.

• Prioritizing all incoming alerts and respond accordingly in a timely manner.

• Validating traffic and/or network activity (per alerts/logs) as anomalous in accordance with agency standards and procedures.

• Identifying, investigating, and escalating potential security threats to senior agency resources when needed.

• Measuring and modeling traffic, while identifying patterns and ports.

• Producing reports, both contractual and ad hoc, providing information on events, trends, issues, and activity as requested by the federal customer.

• Providing data for inclusion in the agency’s CISA report.

• Utilize OSINT tools to identify and mitigate potential cybersecurity threats to the customer’s network.

• Identifying the necessity for, and implementation of, the creation of new intrusion detection signatures.

Work Experience, Knowledge, Skills & Abilities:

• Candidate must have a minimum of 2-4 years of experience as an analyst in a SOC or similar environment.

• Working knowledge of SOC tools and their usage…