SOC Analyst

SOC Analyst Hybrid-- 2 days a week onside in Bethesda, MDThe Security Operations Center Analyst will be responsible for monitoring and analyzing security threats and implementing appropriate countermeasures to protect the organization's information assets.  Key Responsibilities:Monitor and analyze security threats and vulnerabilities and implement appropriate countermeasuresEnsure compliance with regulatory compliance directives, including various NIST and NIH security controls and monitoring and reporting requirementsManage incident response efforts and assist in investigations into security breachesManage and maintain Security Waivers, perform product evaluations and advise management of upcoming changes to the environmentCommunicate and report to stakeholders on security-related documents and status updatesAssist in the development, implementation and oversight of SOC standard operating procedures used to guide daily activities of the operations centerUtilize various security tools like Tenable Security Center, Splunk, MS Defender, SEIM, Symantec DLP, Netsparker, Penetration Testing, Service Now, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, and Endpoint Protection (Cylance)Qualifications:At least three years of experience within the Cyber Security industry, with experience in security event monitoring and incident response services within an enterprise network security environmentCandidates should have advanced experience with Splunk and Tenable (Nessus or Security Center)Bachelor’s or Master’s Degree in Information Technology or related disciplines; or have equivalent and direct experience with the management, operation, and direction of a network and/or security operations centerCISSP, CISM, CySA+, or GCIH certifications are desiredStrong understanding of log analysis and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryption standardsStrong understanding of the various industry standard cyber security disciplines and generally accepted practices governing the present-day cyber security industryStrong understanding of regulatory compliance directives to include various NIST and NIH security controls and monitoring and reporting requirementsExperience with managing and ensuring the timely response and investigations of security events and incidents within a security operations center #cjpostsalary range - $100k-$125k