WashingtonRecruiter Since 2001
the smart solution for Washington DC jobs

Security Operations Analyst - SOC Analyst 2 (Security Clearance required)

Company: SAIC
Location: Vienna
Posted on: December 5, 2019

Job Description:

Description JOB DESCRIPTION: --- SAIC is currently seeking candidates for a Sr. Cyber Security Threat Hunter - Tier II SOC Analyst, supporting one of our federal customers in Vienna, VA. --- This is an exciting opportunity to be part of a key team of cyber security professionals here at SAIC, supporting full life cycle cyber security operations for our customer. --- We are seeking an individual that can bring security analysis and incident response experience to support daily operations and help grow and mature our current SOC environment. --- As a Cyber Threat Hunter you will be responsible for participating in threat actor based investigations, creating new detection methodologies, and provided expert support to incident response and monitoring functions. --- The focus of the Threat Hunter is to detect, disrupt and the eradication of threat actors from enterprise networks. --- To execute this mission, the Threat Hunter will use data analysis, threat intelligence, and cutting-edge security technologies. --- You will also directly support the Security Operations Center by applying analytic and technical skills to investigate intrusions, identify malicious activity and potential insider threats, and perform incident response. Responsibilities: --- General SIEM monitoring, analysis, content development, and maintenance. --- Research, analysis, and response for alerts; including log retrieval and documentation. --- Conduct analysis of network traffic and host activity across a wide array of technologies and platforms. --- Assist in incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts. --- Compile detailed investigation and analysis reports for internal SOC consumption and delivery to management. --- Track threat actors and associated tactics, techniques, and procedures (TTPs). --- Capture intelligence on threat actor TTPs and develop countermeasures in response to threat actors. --- Analyze network traffic, IDS/IPS/DLP events, packet capture, and FW logs. --- Analyze malicious campaigns and evaluate effectiveness of security technologies. --- Develop advanced queries and alerts to detect adversary actions. --- Coordinate threat hunting activities across the network leveraging intelligence from multiple internal and external sources, as well as cutting- edge security technologies. --- Design and build custom tools for investigations, hunting, and research. --- Assist in the design, evaluation, and implementation of new security technologies. --- Lead response and investigation efforts into advanced/targeted attacks. --- Hunt for and identify threat actor groups and their techniques, tools and processes. --- Identify gaps in IT infrastructure by mimicking an attacker---s behaviors and responses. --- Provide expert analytic investigative support of large scale and complex security incidents. --- Perform Root Cause Analysis of security incidents for further enhancement of alert catalog. --- Continuously improve processes for use across multiple detection sets for more efficient Security Operations. --- Review alerts generated by detection infrastructure for false positive alerts and modify alerts as needed. --- Develop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc. --- Provide forensic analysis of network packet captures, DNS, proxy, Netflow, malware, host-based security and application logs, as well as logs from various types of security sensors. --- A passion for research, and uncovering the unknown about internet threats and threat actors. --- Ensure the SOC analyst team is providing excellent customer service and support. Qualifications CLEARANCE REQUIREMENT: Ability to obtain a Public Trust Clearance before start date-- US Citizenship is required ---- REQUIRED EXPERIENCE: -- 5+ years of relevant cyber security experience in IT Security, Incident Response or network security with strong knowledge working in a Security Operations Center BA/BS degree is required OR an additional 6 years of relevant work experience in lieu of degree.-- 3+ years experience with the incident response process, including detecting advanced adversaries, log analysis using Splunk or similar tools, and malware triage.-- 3+ years experience with creating automated log correlations in Splunk or a similar tool to identify anomalous and potentially malicious behavior.-- Demonstrated knowledge of the Splunk search language, search techniques, alerts, dashboards and report building.-- Strong analytical and investigation skills &--active threat hunting and adversary tracking. Working knowledge of security architectures, devices and--threat intelligence consumption and management. Working knowledge of root causes of malware infections and proactive mitigation.-- Working knowledge of lateral movement, footholds, and data exfiltration techniques.-- Experience with Netflow or PCAP analysis.---- Track record of creative problem solving, and the desire to create and build new processes. Experience and knowledge of packet flow, TCP/UDP traffic, firewall technologies, IDS technologies, proxy technologies, and antivirus, spam and spyware solutions. --Convert intelligence into actionable mitigation and technical control recommendations. Knowledge of the underlying logic that security alerts are built upon and apply them when analyzing raw logs and creating new dashboards and alerts. Knowledge of typical behaviors of both malware and threat actors and how common protocols and applications work at the network level, including DNS, HTTP, and SMB. Strong time management and multitasking skills as well as attention to detail as we well as strong collaborative skills and proven ability to work in a diverse team of security professionals. DESIRED EXPERIENCE: Experience with one or more scripting languages (e.g., Python, JavaScript, Perl)-- Perform memory analysis-- and malware analysis Experience with computer exploitation methodologies Experience as a government contractor CISSP or GCIA/GCIH is preferred Desired Qualifications--

Keywords: SAIC, Washington DC , Security Operations Analyst - SOC Analyst 2 (Security Clearance required), Professions , Vienna, DC

Click here to apply!

Didn't find what you're looking for? Search again!

I'm looking for
in category
within


Other Professions Jobs


Supplement Your Warehouse Income - Grocery Shopper
Description: Shipt is a membership-based marketplace that helps people get the things they need, like fresh produce and household essentials, from stores they trust. Help people save time and have fun while you're (more...)
Company: Shipt
Location: Leesburg
Posted on: 12/9/2019

CDL-A Truck Driver Home Weekly with HIGH MINIMUMS!
Description: Western Express has HIGH PAYING REGIONAL truck driving opportunities now available for Flatbed truck drivers. You will stay close to home and have a consistent route with miles you can count on regardless (more...)
Company: Western Express
Location: Charlottesville
Posted on: 12/9/2019

Class A CDL - Dedicated Truck Driver - Aurora Parts
Description: This Dedicated truck driver position features weekly time at home, up to 0.45 per mile with a weekly performance pay up to 0.04 per mile and a predictable work schedule. Dedicated truckers will haul (more...)
Company: Schneider
Location: Lancaster
Posted on: 12/9/2019


CDL-A Owner Operator Truck Driver
Description: CDL-A OWNER OPERATOR TRUCK DRIVER JOBS BUILD YOUR BUSINESS WITH AN INDUSTRY LEADER Renewed. Recommitted. Ready.REFER MORE. EARN MORE WITH A 4,000 REFERRAL BONUS At USA Truck, Owner Operator CDL-A truck (more...)
Company: USA Truck
Location: Charlottesville
Posted on: 12/9/2019

Regional CDL A Truck Drivers - $6,000 Sign On Bonus
Description: REGIONAL CDL A DRIVER - 60 CPM - 6,000 SIGN-ON BONUS A LITTLE ABOUT THE JOB Regional Full Time Home For Reset on Weekends Run the Northeast Region COMPANY EQUIPMENT Volvos and Kenworths Dry Van No-touch (more...)
Company: PAUL MILLER TRUCKING
Location: Lancaster
Posted on: 12/9/2019

CDL-A Company Team Drivers
Description: Job Description: Class A CDL Team Drivers Needed Company Team Drivers Who Can Run 22,000 Miles per Month Call us today at 866 995-0537 Or apply online below Artur Express is looking for W-2 paid, CDL (more...)
Company: Artur Express
Location: Lancaster
Posted on: 12/9/2019

Hiring Flatbed Drivers-$5,000 Sign- On Bonus
Description: Over the Road Flatbed Driver Benefits: br br 1,500 Holiday Fast Pay Incentive, Come to a Class in December and Leave with 1,500 in Hand br 5000 sign
Company: JLE Industries
Location: Lancaster
Posted on: 12/9/2019

RideShare Driver? Advertise On Your Car, Earn Passive Income
Description: We are urgently seeking drivers to advertise on their vehicle for local
Company: Company Confidential
Location: Lancaster
Posted on: 12/9/2019

Forklift Operator (US) Lancaster PA NERC (Lancaster, PA)
Description: Virtual Job Tryout: After completing your application, DHL Supply Chain asks that you also complete a Virtual Job Tryout VJT . The VJT provides a realistic job preview to each applicant allowing you (more...)
Company: DHL Express
Location: Lancaster
Posted on: 12/9/2019

General Warehouse - Mail shop helper
Description: Employer Name: SpiderID: Location: Lancaster, Pennsylvania Date Posted: 11/20/2019 Wage: 12.00 - 13.00 per hour Category: Manufacturing Job Code: GENER84363 Job Description: Looking
Company: PeopleShare
Location: Lancaster
Posted on: 12/9/2019

Log In or Create An Account