SOC Analysts

Job Description

Job Description

Team, I have the need for 3 SOC Analysts to support government agency in Crownsville, MD. These are fully onsite roles with two 12 hour shifts (day/night). We are looking to hire for day shift only 6am-6pm. . We are looking for intellectually curious people who think outside the box, want to learn new skills, and question why things are done the way they are. Need to have at least 2-3 years of SOC experience and ideally come from mature environments. Thank you,

• Monitor, defend and protect perimeter interface for malicious network traffic. 
• Monitor, defend and protect hosts  for malicious activity or activity that could indicate lateral movement within the environment. 
• Performing network analysis of egress and ingress traffic. 
• Monitoring security events, correlated information from the functional areas to identify incidents, issues, threats, and vulnerabilities.  
• Conduct initial triage, containment, categorization, and escalation for suspicious events and incidents.
• Provide compromise response activities as necessary.  
• Support other SOC’s throughout the MD State enterprise as needed to maximize visibility, response readiness and situational awareness
• Develop Incident Response Threat Package – Ad hoc per incident
• Work with the MD CISO to maintain SOC SOP and Concept of Operations
• Resources shall be required to comply with all applicable laws, regulations, policies, standards and guidelines affecting Information Technology projects, which may be created or changed periodically.
•  
• All contractor staff supporting this work order must complete the DoIT background investigation for privileged account

• Capable of working independently, establishing priorities and managing task completion within deadlines that are responsive to client needs within a team of SOC analysts working together to support our clients
• Able to communicate effectively through writing, speaking, and presenting to client technical representatives.
• Team player capable of productively contributing to the client mission by supporting fellow teammates in a dynamic growing and changing environment.
• Knowledgeable in network traffic analysis, threat detection, and advanced threat tactics, techniques and procedures (TTPs).
• Knowledgeable of network and security architecture principles, firewall and IDS/IPS fundamentals, endpoint security systems and other security protective/detective systems.
• Experience in cybersecurity event analysis, intrusion detection, and security operations.

• Possess an industry certification like CISSP, GCIH, GMON, GCIA, OSCP, CEH, CompTIA Security+ or other recognized credential(s).
• Computer Science or related 4-year degree.
• Experience creating detailed queries and scripts, such as regular expressions, for log, event and correlation analysis.
• Experience scripting in Python.
• Experience using Splunk.