Cyber Operations SOC

Support Information Security and Cybersecurity Threat Management programs by responding to cyber incidents in a multi-team environment. The Cybersecurity Threat Analyst investigates potential security threats, documents security investigations and incidents in accordance with established standards, and contributes to maintaining the security.

Key Responsibilities

Investigate and respond to known cyber threats identified through security incident and incident management programs and execute appropriate mitigation strategies.

Participate in the creation and maintenance of use cases for recurring investigation and incident triggers in support of 24/7 Cybersecurity Threat Operations and Cybersecurity Threat Management programs.

Establish, maintain, and enhance playbooks used in response to investigation and incident triggers.

Interface with Information Security teams such as Network Operations, Cyber Threat Operations Center (CTOC), Vulnerability Management, risk officers, and technology management to guide cybersecurity investigations and incidents.

Ensure all operations and maintenance activities are properly documented and updated as required.

Participate in threat hunting activities to proactively identify threats within the enterprise environment.

Required Skills & Qualifications

Bachelors degree in Information Technology or a related field, or equivalent education and relevant training.

Broad knowledge of general IT with experience in operating systems, networking, programming, web development, or database administration.

Demonstrated knowledge of cybersecurity concepts, including SOC operations, IDS/IPS, SIEM tools, threats, vulnerabilities, exploits, incident response, and remediation.

Foundational knowledge of threat intelligence research, analysis, and dissemination processes.

Preferred Qualifications

Minimum of two years of relevant cybersecurity experience.

Industry certifications in general technology such as MCP, MCSE, or Network+.

Industry certifications in cybersecurity or forensics such as CEH, GSEC, CCNA, or GCIA.

Experience working in a Security Operations Center (SOC) or Network Operations Center (NOC), or within the Intelligence Community.