SOC Analyst: Cyber Defense & Incident Response (Active Secret)

Must be a U.S. Citizen Responsibilities Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs; prioritize and differentiate between potential intrusion attempts and false alarms. Develop, maintain, and follow SOC Standard Operating Procedures (SOPs). Support daily and monthly situation reporting per shift. Proactively review large data sets for anomalous activity. Create detective content for monitoring devices such as IDS and SIEM and advise on proactive blocks for security architecture. Create and track security investigations to resolution. Compose security alert notifications and other communications. Advise incident responders on the steps to take to investigate and resolve computer security incidents. Stay up to date with current vulnerabilities, attacks, and countermeasures. Position requires the ability to work a shift schedule. The ideal candidate will be able to multitask and give equal attention to a variety of functions while under pressure. Requirements High school diploma or GED Two (2) years’ experience in security Experience in handling incident response Certified Ethical Hacking (CEH) certification or CompTIA CySA+ AND within 6 months of hire any from the CSSP Analyst, Infrastructure Support, or IR from the DOD 8570 list (or other similar certifications approved by Government) Secret Clearance (active) Phoenix Cyber is an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status. Phoenix Cyber participates in E-Verify to confirm the employment eligibility of all newly-hired employees. #J-18808-Ljbffr