Security Operation Center; SOC Analyst II; TS, w​/SCI Eligibility

Position Details

Position Title:

Security Operation Center (SOC) Analyst II

Location:

Schriever SFB, CO
US Citizenship required.

TS, with SCI eligibility.
Eligibility for access to Special Access Program Information.
Willingness to submit to a Counterintelligence polygraph.

SOC Analyst’s primary function is to provide comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise. The analyst conducts security event monitoring, advanced analytics and response activities in support of the government’s mission. The role requires a solid understanding of cyber threats and information security in the domains of TTPs, Threat Actors, Campaigns, and Observables, and is familiar with intrusion detection systems, intrusion analysis, SIEM platforms, endpoint threat detection tools, and security operations ticket management.

The analyst supports activities within Special Access Programs (SAPs) supporting Department of Defense agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD), and Military Compartments, providing day‑to‑day support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.

• Strong analytical and technical skills in computer network defense operations; lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting, and Malware Analysis.
• Analyze IT security events to identify legitimate security incidents versus non‑incidents, including triage, investigation, countermeasure implementation, and incident response.
• Hands‑on experience with SIEM platforms and/or log management systems that perform log collection, analysis, correlation, and alerting.
• Logical and critical thinking to analyze security events (Windows event logs, network traffic, IDS events).
• Excellent organization and attention to detail in tracking activities within Security Operation workflows.
• Working knowledge of operating systems (Windows, OS X, Linux) and Windows Active Directory, and knowledge of network communications and routing protocols (TCP, UDP, ICMP, BGP, MPLS) and common internet applications and standards (SMTP, DNS, DHCP, SQL, HTTP, HTTPS).
• Experience identifying and implementing counter‑measures or mitigating controls for deployment and implementation in the enterprise network environment.
• Experience with Network Threat Hunting, Big Data Analytics, Endpoint Threat Detection and Response, SIEM, workflow and ticketing, and Intrusion Detection System technologies.

• 5‑7 years related experience.
• Special Access Program (SAP) experience.
• Prior performance in roles such as ISSO or ISSM.
• Must possess CSSP Auditor or CSSP Incident Responder certification.
• Ability to develop rules, filters, views, signatures, counter‑measures and operational relevant applications and scripts to support analysis and detection efforts.
• Research emerging threats and recommend monitoring content within security tools.
• Experience analyzing Net Flow data and packet capture (PCAP).
• Robust knowledge of common attack methodologies, tactics and protocols.
• Knowledge of TCP/IP protocol suite, security architecture, DNS, and remote access security techniques and products.
• Technical experience in the information security field using security technologies such as IDS/IPS, firewalls, SIEM, network behavior analysis tools, antivirus, network packet analyzers, digital forensics tools, and cyber incident response activities in an enterprise environment.

• Bachelor’s degree in a related area or equivalent experience (4 years).

• TS, with SCI eligibility.
• Eligibility for access to Special Access Program Information.
• Willingness to submit to a Counterintelligence polygraph.

• Competitive salary for well‑qualified applicants.
• 401(k) plan.
• Annual performance bonus.
• Certification and advanced degree attainment bonuses.
• Student Loan / Tuition reimbursement.
• Health Care Insurance (medical, dental, vision).
• Up to four weeks of paid vacation.
• 11 Federal Holidays and 3 Floating Holidays.
• Team bonding events.

Red Trace Technologies is an EOE employer.