Security Operations Analyst, Mid

Job Number

R0241743

Security Operations Analyst, Mid

Responds to and resolves cyber security incidents. Participates in cyber incident response investigations requiring forensic, malware, and log analysis, and analyzes forensic images and triage datasets to identify indicators of compromise, lateral movement, and unauthorized access or exfiltration of data. Applies specific functional knowledge as well as working and general industry knowledge. Develops or contributes to solutions to a variety of problems of moderate scope and complexity.

Works independently with some guidance and may review or guide activities of more junior employees.

• 1+ years of experience supporting Information Technology or Intelligence Operations
• Experience supporting a Computer Incident Response Team, Cyber Network Operations, or Security Operations Center (SOC) operations for a large and complex enterprise
• Experience with Intelligence Driven Defense, Cyber Kill Chain methodology, or MITRE ATT&CK framework
• Knowledge of industry-accepted standards for incident response actions and best practices for SOC operations
• Knowledge of security operation tools, including SIMs or DCAP analysis
• Knowledge of intrusion set tactics, techniques, and procedures
• TS/SCI clearance
• Bachelor's degree

• Experience with Microsoft Sentinel
• Experience with Splunk
• TS/SCI clearance with a polygraph
• GIAC Continuous Monitoring (GMON) Certification
• GIAC Certified Incident Handler (GCIH) Certification
• GIAC Certified Forensic Analyst (GCFA) Certification
• GIAC Certified Intrusion Analyst (GCIA) Certification
• GIAC Network Forensic Analyst (GNFA) Certification
• GIAC Cloud Threat Detection (GCTD) Certification
• GIAC Cloud Forensics Responder (GCFR) Certification

TS/SCI clearance is required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Projected salary range: $61,900.00 to $ (annualized USD). Posting will close within 90 days of posting date.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.