SOC Analyst

SOC Analyst

We are looking for a SOC Analyst to support a contract for the United States Mint. All candidates must have the following background:

Serves as a Tier 2 cyber security analyst supporting one or more of the following areas: incident response, monitoring and detection, cyber intelligence analysis. Candidates must have extensive experience working with various security methodologies and processes, advanced knowledge of TCP/IP protocols, experience configuring and implementing various technical security solutions, extensive experience providing analysis and trending of security log data from a large number of heterogeneous security devices. Must possess expert knowledge in two or more of the following areas: Vulnerability Assessment, Intrusion Prevention and Detection, Access Control and Authorization, Policy Enforcement, Application Security, Protocol Analysis, Firewall Management, Incident Response, Encryption, Web-filtering, Advanced Threat Protection.

Candidates shall also have specialized experience in one of the following areas:

• Monitoring and Detection Analyst: Candidates shall have a minimum of three (3) years of professional experience in cybersecurity, information risk management, or information systems risk assessment, and must be knowledgeable in many areas such as: Vulnerability Assessments, Intrusion Prevention and Detection, Access Control and Authorization, Policy Enforcement, Application Security, Protocol Analysis, Firewall Management, Incident Response, Data Loss Prevention, Encryption, Two-Factor Authentication, Web-filtering, and Advanced Threat Protection.
• Incident Response Analyst: Candidates shall have a minimum of three (3) years of professional experience responding to information system security incidents and an ability to use the Client furnished toolset to identify and determine root causes of incidents and provide any required documentation and possible evidence to authorized personnel who carry legal or investigative authorities.
• Cyber Intelligence Analyst: Candidates shall have at least three (3) years of professional experience in incident detection and response and/or cyber intelligence analysis, and a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field.

Basic Qualifications

Ability to obtain public trust clearance. Minimum five (5) years of professional experience in incident detection and response, malware analysis, or cyber forensics, and a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field. In addition, minimum of three (3) years of specialized experience in one or more of the following areas: Monitoring and detection, Incident Response, Cyber security analysis.

Desired certifications: SANS: GCIH, GCIA SEI: CSIH Experience in cyber government, and/or federal law enforcement. Web proxies DLP and web security Splunk Nessus and Tennable Extensive Security Tool management and engineering with some of the following:

• Web Gateway/Proxy such as McAfee
• DLP such as Symantec
• Email security tools such as IronPort and FireEye
• CDM tools like RES, BigFix, ForeScout

• Vulnerability Management • Security architecture development • Customer requirements identification • Operations and maintenance • Performance metrics related to security operations • Staffing and management responsibilities • Experience identify new tools and/or required upgrades based on ROI

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status").