CSOC Tier 1 Analyst

CSEngineering is looking to add a CSOC Tier 1 Analyst to our growing team! As the Cyber Security Operations Center (CSOC) Tier 1 Analyst, you are responsible for the initial assessment of alerts and notification to determine whether an incident requires Level II and III support. This position operates within a team of CSOC Analysts and escalates incidents to appropriate levels within CSOC hierarchy based on requirements and standard operating procedures.

JOB RESPONSIBILITIES

Provide Level I technical support in CSOC operations and activities. (CSOC is a 24/7 operations center environment.) Provide daily/weekly updates to CSOC Level II support on CSOC operations and developments. Perform initial triage and response of CSOC events, notifications, and alerts. Identify security incidents and distinguish them from non-security-related issues and escape to the appropriate tier within the CSOC hierarchy, while maintaining clear documentation. Operate within the CSOC ticketing system and participate in the development and optimization of efficient incident reporting procedures. Maintain awareness of the IT infrastructure and changes that may impact national cybersecurity or predicator detection. Recommend procedures to Security Operations Center (CSOC) Level II support for improvement of the level one CSOC duties and activities. Maintain up to date information about the comprehensive security tool suite available within the organization to effectively develop and escalade security incidents. Participate in ongoing informal as well as formal knowledge-sharing sessions within CSOC and IT departments. Assist, as required, with the forensic analysis of less complex digital media devices. Assist with the documentation required for the findings and recommendations for digital media analysis.

REQUIRED CERTIFICATIONS AND QUALIFICATIONS

Bachelor's degree and 1 to 3 years of cyber operation experience. Additional work experience and certifications will be considered in lieu of a bachelor's degree. Certifications: Splunk Core Certified User, Security+, and A+. Ability to work a day or night shift rotational schedule. Additional Desired Experience: ITIL, SNOW. HHS experience a plus. Location: Parklawn Drive, Rockville MD (Onsite)

BACKGROUND AND SECURITY SCREENING

Final candidates may be subject to employment verification, education verification, professional reference checks, criminal background screening, security clearance verification, and/or suitability review, as permitted by applicable federal, state, and local laws. Candidates are expected to provide accurate and complete information throughout the application and interview process. Any material misrepresentation, omission of relevant information, falsification of qualifications, certifications, employment history, clearance status, or educational credentials may result in removal from consideration or withdrawal of an employment offer. For positions supporting federal agencies or government contracts, additional security, clearance, credentialing, or customer-specific suitability requirements may apply. CSE offers a competitive salary and comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off. CSE is an equal opportunity employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity and veteran status. #J-18808-Ljbffr Constellation Software Engineering