SOC Analyst- Active Public Trust Required Technology Systems

Senior SOC Analyst needed for a Contract opportunity with SOC's client to work hybrid onsite in Washington, DC.



Contract Duration: 6 months, with possibility of extension/conversion to FTE

Work Location: Hybrid in Washington, DC (1 day per week onsite/remote)

**Candidate must be a US Citizen and hold an Active Public Trust**

Job Description:

The Senior Analyst will provide expert technical support in the areas of Incident Response (IR), Network Defense, and SIEM content creation. Additionally, the ideal candidate will be an expert in cyber threats and information security in the domains of TTP's, Threat Actors, Campaigns, and Observables.

Required Qualifications:

• Must be a U.S. Citizen.
  
• Ability to obtain Public Trust clearance.
  
• A minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, forensics, cyber threats and information security.
  
• A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network-based security monitoring, identifying and analyzing anomalous activities with familiarity in host-based tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint threat detection tools, and ticket management in a SOC Operations environment.
  
• One or more of the following certifications: GCIA, GCIH, GCFA, GCED, or other Information Assurance Technician (IAT) Level III certification (CASP+ CE, CCNP Security, CISA, CCSP), as well as an active CISSP, or the ability to obtain one within six (6 months) of hire.
  
• Demonstrated understanding of incident response, insider threats, forensics, cyber threats and information security.
  
• Prior experience with a Splunk as Security Information and Event monitoring (SIEM) platform and log management system.
  
• Experience creating custom content such as rules, filters, signatures, countermeasures and operationally relevant scripts to support analysis and detection efforts. Strong SPL knowledge is preferred.
  
• Experience collecting data and reporting results; handling and escalating security issues or emergency situations appropriately; providing incident response capabilities to contain and mitigate threats to maintain the confidentiality, integrity, and availability of protected data.
  
• Ability and experience extracting and managing complex large data sets.
  
• Strong documentation and written communication skills with technical report writing experience.
  
• Experience with ad-hoc training to junior, mid, or senior members of a cyber work force.
  
• Existing Subject Matter Expertise (SME) of Advanced Persistent Threat (APT) or emerging threats.
  
• Proficiency in utilizing various packet capture (PCAP) applications/engines and in analysis of PCAP and NetFlow data.
  
• Experience with static and dynamic malware analysis, including reverse engineering of binaries.
  
• Familiarity with coding, scripting languages (BASH, PowerShell, Python, etc.), or with software development frameworks such as .NET.
  

Desired Qualifications:

• Experience mentoring and/or leading a technical team.
  
• Experience in Cyber Hunt activities.
  
• Advanced troubleshooting skills.
  
• Metadata extraction and analysis.
  
• Malware Reverse Engineering (MA/RE).
  

Work Location:

• Washington, DC or Hybrid (1 days onsite/remote) - Potentially fully remote eligible pending customer approval
  

Education:

• BS or MS degree preferred
  

Employment Prerequisites

The following requirements must be met to be eligible for this position: successful completion of a background investigation and drug urinalysis.



SOC, a Day & Zimmermann company, is an Equal Opportunity Employer, EOE AA M/F/Vet/Disability.



Note: Any pay ranges displayed are estimations, which may have been provided by job boards. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.



#INDSOC