CyberSOC Co-op US Green Shift

SRA’s mission is tolevel up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself onmaintaininga culture where team members have a shared sense of support and belonging, consistent withour It’sPersonal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture.

SRA has twice been nameda Best Place to Work by the Philadelphia Business Journal.

These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but candemonstrateexcellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply.

SRA values a diverse workplace and strongly encourages people of all backgrounds to apply.

TheCyberSOCCo-Op will be part of Security Risk Advisors’CyberSOCPractice, dedicated to the Green Shift hours of 4:30PM - 1:30AM Eastern. This role will be involved in the day-to-day, 24x7,and operations oftheSOC. This is an outstanding opportunity to work with a wide variety of tool sets and various client organizations.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Continuouslymonitorand triage security alerts across endpoint, network, identity, and cloud telemetry.

• Investigate alerts todetermineseverity, scope, and whether activity is benign, suspicious, or malicious; esc... (escalate per documented procedures.)

• Perform initial incident response support activities such as evidence collection, timeline development, and basic containment recommendations under supervision.

• Use SIEM, EDR, NDR/NSM, and SOAR platforms to detect, investigate, and respond to threats; examples include Splunk or Microsoft Sentinel (SIEM), Crowd Strike Falcon or Microsoft Defender for Endpoint (EDR).

• Leverage threat intelligence and common frameworks (e.g., MITRE ATT&CK) to enrich investigations and communicate attacker behavior clearly.

• Thoroughly document work in case management systems, including investigation steps taken, evidence reviewed, decisions made, and recommended next actions.

• Communicate status and findings to internal leadership and clients with professionalism and clarity (written and verbal).
• Contribute to continuous improvement byidentifyingrecurring false positives/noisy alerts and providing feedback for tuning and playbook updates.
• Maintainproficiencythrough required training, labs, and knowledge sharing; follow policies to protect confidential information.
• Protect organization’svalue by keeping information confidential.

Not applicable.

This joboperatesin a professional office environment,and all co-ops are expected to work in the office. This role routinely uses standard office equipment.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required totalk and hear; use hands to finger, handle, or feel; and reach with hands and arms. The employeefrequentlyis required tostand and walk. This is alargely sedentary role.

This is a full-time temporary co-op position with 40 working hours expected weekly, typically worked over five consecutive days. New hires may be assigned to any of our three daily shifts (morning, day, or night) and willworka schedule that includes either Saturday or…