SOC Corelight​/Verodin SME

SOC Corelight/Verodin SME

Duration: 6 months

Location:

San Antonio, TX or Remote with occasional travel to San Antonio, TX Work Status: US Citizen Clearance:
Active Secret clearance

• Proficient in highly demanded emergent cyber tools or processes required under special circumstances.
• Experienced with SOC detections, operations, and responses;
  Threat Management;
  Exposed to API integration;
  Programming experience with APIs (python, Java script);
  Basic understanding of security tooling and infrastructure.
• Possessing strong analytical, technical and communication skills with specific experience in SOC, security-as-a-service, and the associated current enabling technology roadmaps.
• Knowledge on how to secure an enterprise's architecture by determining security requirements.
• Knowledge of various security tools (e.g., AV, HIPS, firewalls, VPN, DLP, etc.) with product experience in Corelight/Verodin.
• Maintain and provide technical expertise for Network detection and response in support of SOC Operations
• Apply subject matter expertise to specific incident, security application or enterprise environment to improve security posture or resolve issues.

• Hands on experience utilizing Corelight, Verodin or related network detection, simulation and response products and network or security administration
• Four plus years of professional IT and/or Cyber experience
• Bachelor's Degree OR an additional 4 years of IT and/or Cyber experience

• One or more related certification such as CISSP, CCNP, Security+, AWS Solutions Architect, AWS Certified Developer, Azure Fundamentals, Azure Administrator Associate, Azure Dev Ops Engineer, Splunk Core Consultant, Elasticsearch Engineer, applicable Security vendor certifications (Microsoft, Red Hat, McAfee, Tenable, Carbon Black, Cylance, Fire Eye, Crowd Strike, etc.).
• Experienced in the acquisition, design, sizing, deployment, installation, maintenance, operating and usage of the Government Enterprise networks
• Experience with SIEM or other network event logging, monitoring and scanning technologies
• Familiarity with the NIST 800, FedRAMP, Risk Management Framework, Security Controls, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines