Tier l Security Operations Center Analyst - Greenbelt, MD


Job Order #:



Tier l Security Operations Center Analyst - Greenbelt, MD


Greenbelt, MD 



Salary Type:

per year


IT-Software Development: Computer-Network Security, Database Development-Administration, Desktop Service and Support, Enterprise Software Implementation & Consulting, General-Other: IT-Software Development, Network and Server Administration, Software-System Architecture

Job Description:

Tier l Security Operations Center Analyst
The Tier l Security Operations Center Analyst will possess experience with network, endpoint, threat intelligence, forensics and malware reverse engineering, as well as the functioning of specific applications or underlying IT infrastructure; has analyzed phishing emails including email headers, malware, source code, acts as a first responder to account/system attacks and compromises to determine threat vectors and provide initial remediation; uses SIEM to monitor/analyze incidents, and works with stakeholders to resolve incidents; escalates incidents when necessary using policies and procedures, closely involved in developing, tuning and implementing threat detection analytics.
-Act as network incident first responder for a 24/7 staffed SOC, reviewing and verifying system alerts.
-Assist with the development of incident response plans, workflows, and SOPs.
-Maintain security sensors and tools.
-Monitor security sensors and review logs to identify intrusions.
-Escalate security incidents using established policies and procedures.
-Use tools and techniques to perform initial extraction, de-obfuscation, or other manipulation of malware related data.
-Perform initial analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available.
-Work directly with cyber threat intelligence analysts to convert intelligence into useful detection.
-Collaborate with incident response team to rapidly build detection rules as needed.
-Identify incident root cause and take proactive mitigation steps.
-Perform lessons learned activities.
-Review vulnerabilities and track resolution.
-Review and process threat intel reports.
-Implement detection use cases.
-Implement IDS signatures.
-Assist with incident response efforts.
-Provide critical information for customer report briefs.
-Participate in customer security assessments.
-Participate in table top exercises.
-Bachelor’s Degree in a relevant major from an accredited college or university with 3+ years of continuous and progressive experience.
-Basic, yet experienced understanding of root causes of malware infections and proactive mitigation.
-Basic, yet experienced understanding of lateral movement and footholds.
-Basic, yet experienced understanding of data exfiltration techniques.  Demonstrated ability in critical thinking, problem solving, and analytics.
-Enjoy analyzing patterns looking for outliers.
-Enjoy creating ways to find needles in haystacks.
-Have real world experience analyzing complex attacks and understand TTPs of threat actors.
-Define relationships between seemingly unrelated events through deductive reasoning.
-Basic, yet experienced in network/host based intrusion analysis, malware analysis, forensics, and cyber threat intel.
-Basic, yet experienced knowledge of advanced threat actors and complex attacks.
-Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff.
-Quick study with new tools.
-Basic, yet experienced knowledge of Splunk.
Candidates must have at least 1 of the following certifications:
-CERT Certified Computer Security Incident Handler
-Electronic Commerce Council Certified Ethical Hacker (ECC)
-GIAC Information Security Fundamentals (GISF)
-ISC2 Certified Information System Security Professional (CISSP)
-Basic, yet experienced knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS).
-Basic, yet experienced technical understanding of operating systems, network architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures.
-Basic, yet experienced knowledge of encryption, key management and cryptology.
-Familiarity with the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines.
-Basic, yet experienced in performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation.
-Basic, yet experience with planning and implementing secure networking practices such as: application segmentation, network segmentation, NAC and other access control testing/validation, updating access control SOPs.
-Understanding of configurations and experience with an enterprise SIEM solution including signature tuning, development of correlation rules, reports, and alarms.
-Familiarity with a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (Power shell, Python) software development frameworks, operating systems, and networking technologies. Basic, yet experienced understanding of various web application frameworks such as ASP.NET, J2EE.
Keywords:  Greenbelt MD Jobs, Tier l Security Operations Center Analyst, SOC Analyst, Network, EndPoint, Threat Intelligence, Forensics, Malware, Maryland Recruiters, Information Technology Jobs, IT Jobs, Maryland Recruiting
If you are an employer and recruiting for similar IT professionals / positions, please contact our Technical Recruiters at Next Step Systems  http://www.nextstepsystems.com/employers_submit_gg.htm.  We are a national IT Recruiting Firm / Agency specializing in full-time direct hire Information Technology employment opportunities.
No Corp-To-Corp Or Third Party Recruiters; W-2 Direct Hire Only.
To Apply Now, Send Your Resume To http://www.nextstepsystems.com/jobseekers_submit_gg.htm.
Please check out all of our jobs at http://www.nextstepsystems.com, http://www.ginastechjobs.com, http://www.parallelpartners.com, and http://www.itrecruiters.technology.
Company Info
Next Step Systems
Chicago, IL, United States

Website: www.nextstepsystems.com

Company Profile