SOC Analyst - Des Moines, United States - GuidePoint Security
Description
An active Top Secret / SCI clearance is required. Work is to be performed 100% onsite with our Government Customer (either Springfield, VA or St Louis, MO)
A Cybersecurity Operations Center Analyst participates on a team of skilled cybersecurity professionals who perform in-depth analysis of potential cybersecurity incidents and provide formal recommendations to organizational leadership.
Tier 1 Cybersecurity Operations Center Analyst provide first line analysis of potential intrusions based on alerts, events, and tips provided by stakeholders.
Cybersecurity Operations Center Analyst leverage all available enterprise security tools, knowledge sources, and data artifacts to determine the who, what, when, where and why of an intrusion.
When required, Cybersecurity Operations Center Analyst coordinate the execution and implementation of all actions required for the containment, eradication, and recovery from cybersecurity events and incidents.
What You'll Get To Do:
Participate in the operation of an enterprise class Cybersecurity Operations Center that functions 24x7x365
Monitor the enterprise Splunk Security Information and Event Management (SIEM) and various security technologies for suspicious activity
Perform the initial analysis on security events and assign the appropriate degree of urgency to facilitate the proper organizational response
Perform the initial documentation, tracking , and monitoring of security events within the enterprise ticket management system
Collaborate with fellow analyst when security events are escalated to provide additional information as needed
You'll Bring These Qualifications:
US Citizen with an Active TS/SCI (required to obtain a CI Poly within 6 months)
2-5 years' experience in a Cybersecurity Operations environment. Additional Cybersecurity experience may be considered.
DoD M IAT Level II (Security+ or equivalent)
CSSP Analyst Certification (must be obtained within 6 months of hire date)
#J-18808-Ljbffr