Night Shift SoC Analyst; Intermediate

Company

Federal Reserve Bank of Richmond—When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic and diverse team for our future.

Bring your passion and expertise, and we’ll provide the opportunities that will challenge you and propel your growth—along with a wide range of benefits and perks that support your health, wealth, and life. In addition to competitive compensation, we offer a comprehensive benefits package that includes tuition assistance, generous paid time off, top‑notch health care benefits, child and family care leave, professional development opportunities, a 401(k) match, pension, and more.

All brought together in a flexible work environment where you can truly find balance.

The Federal Reserve System (FRS) National Incident Response Team (NIRT) has an immediate opening for an Intermediate SOC Analyst (Incident Response) position, reporting to a Senior Manager Information Security. The NIRT, a national service provider for the FRS, delivers effective intrusion detection, incident response, forensics, security intelligence, threat assessment, and penetration testing services.

This role will be a combination of SOC analyst (providing triage of potential security events) and incident handler (investigating and responding to actual security incidents). Over time as your skills grow and you learn our environment our expectation is you will spend more time on incident response and less time on event triage. You can also expect to develop more specialized skills such as computer forensics, phone forensics, malware analysis, and threat hunting on the job and through external training.

** This is a remote night shift opportunity and you must be willing and able to work 8p-8a EST
** Generally you will work three consecutive nights with the following nights off however at times this might change due to team absences or business needs.

• Perform security event triage and analysis with knowledge of current security threats and techniques.
• Manage security incidents and conduct incident analysis, containment, protection, mitigation, and recovery activities across the FRS.
• Evaluate incident response workflow processes.
• Analyze all relevant data sources for attack indicators and potential network compromise.
• Respond to different attack vectors such as data exfiltration, DDoS, malware, insider risk, and phishing.
• Develop scripts and tools to improve the efficiency of incident detection and response processes.
• Lead investigations.
• Identify gaps/opportunities for enhancements to workflows and processes for enhancing the incident response lifecycle.
• Support cross-team projects to help implement cybersecurity improvements.
• Provide subject matter expertise to partners on an as‑needed basis.

• You should have in-depth understanding of a variety of information technologies and information security topics. Specifically, this should include the following:
  • Security platform and technology capabilities; SIEM utilization skills to analyze security events from multiple monitoring and logging sources to identify and confirm suspicious activity.
  • Knowledge of current security threats, techniques, and landscape, and a dedicated approach to research current information security landscape.
  • Practical understanding of IT Infrastructure designs, technologies, products, and services. This should include knowledge of networking protocols, firewall functionality, host and network intrusion detection systems, operating systems, databases, encryption, load balancing, and other technologies.

When you join the Richmond Fed, not only will you find a challenging and purposeful career, you’ll also have access to a wide range of benefits and perks that support your health and wealth, including:

• Great medical benefits
• Pension and 401(k) with employer match
• Paid time off
• Tuit…