Security Operations Center Analyst

Quantum Sky is searching for a Security Operations Center (SOC) Analyst to support threat monitoring, detection, event analysis, and incident reporting. You will be responsible for monitoring enterprise networks and systems, detecting events, and reporting on any and all threats that are directed against those systems regardless of their classification level or type. Typically, the client’s sensor grid acquires millions of events per day and events are analyzed and categorized in accordance with the Cyber Security Incident Response Plan. The Incident Response Analyst will provide the client with a fully comprehensive array of analytical activities in support of external threat monitoring, detection, event analysis, and incident reporting efforts including presentation reviews, internal and external threat reporting, analysis of inbound and outbound public internet traffic, suspicious e-mail messages, administering access request to specific public sites, communicating and coordinating the characterization of events and the response. Responsibilities Provide support for complex computer network exploitation and defense techniques to include deterring, identifying, and investigating computer and network intrusions; providing incident response and remediation support Perform comprehensive computer surveillance/monitoring, identifying vulnerabilities; provide recommendations to improve security posture, and maintain the agency's incident response plan and associated artifacts Support cybersecurity training efforts and national security exercises, such as table-top exercises, functional exercises, and scenario-based exercises. Provide technical support for a comprehensive risk management program identifying mission-critical processes and systems; current and projected threats; and system vulnerabilities. Required Bachelor’s Degree, or an equivalent combination of formal education, experience Minimum of one (3) year of general work experience and two (2) year of relevant experience Minimum one (1) year of experience as a Security/Network Administrator Experience in some of the following tools and technologies: CrowdStrike EDR Splunk Enterprise Security, SOAR, and UBA Strong analytical and organizational skills. Strong verbal and written communication skills. Experience with MS Word and other MS Office applications. Experience working in a SOC and doing incident response is preferred. Experience with securing various environments preferred. Clearance Active Top Secret clearance required Location This is a hybrid role with expectations of being on-site role in Columbia, SC a few days a week. #J-18808-Ljbffr