- Provides supervision and oversight for Security Analysts during a standard working team/shift
- Assumes full responsibility and accountability for ensuring that customers receive world-class service from Security Analysts assigned to their shift
- Assigns Security Analysts to information security events and oversees investigations as necessary
- Assumes responsibility for issues and requests escalated by Security Analysts and executes additional escalations as necessary
- Supervise operations in deterring, identifying, monitoring, investigating, and analyzing computer network intrusions
- Supervises complex event investigation and incident declaration
- Ensure events are properly identified, analyzed, and escalated to incidents
- Hunt for suspicious activity based on anomalous activity and indicators of compromise from various intelligence feeds and toolsets
- Participate in the response, investigation, and resolution of security incidents
- Create knowledge base articles for handling medium and high severity incidents
- Assist in the advancement of security policies, procedures, and automation
- Monitor and analyze security events and alerts from multiple sources, including security information and event management (SIEM) software, network and host-based intrusion detection systems, firewall logs, and system logs (Windows and Unix), and databases
- Separate true threats from false positives using network and log analysis and escalate possible intrusions and attacks
- Provide incident investigation, handling, and response to include incident documentation
- Initiate tickets, document, and escalate to higher-level security analysts
- Develop incident response reporting and policy updates as needed
- Perform computer and network forensic analysis
- Serve as the technical escalation point and mentor for lower-level analysts
- Regularly communicate with customer IT teams to inform them of issues, help them remediate, and ensure that they continue to operate business as usual
- Perform triage of incoming issues (assess the priority, determine risk)
- Work with customers to deploy hardware and software monitoring systems
- Maintain a strong awareness of the current threat landscape
- Excellent teamwork skills
- Knowledge of and experience with intrusion detection/prevention systems and SIEM software
- Advanced knowledge and understanding of network protocols and devices.
- Advanced experience with Mac OS, Windows, and Unix systems.
- Ability to analyze event logs and recognize signs of cyber intrusions/attacks
- Ability to handle high pressure situations in a productive and professional manner.
- Ability to work directly with customers to understand requirements for and feedback on security services
- Advanced written and verbal communication skills and the ability to present complex technical topics in clear and easy-to-understand language
- Strong teamwork and interpersonal skills, including the ability to work effectively with a globally distributed team
- Able and willing to work in a 24/7/365 environment, including nights and weekends, on a rotating shift schedule
- Ability to provide create signatures for security tools
- Familiarity with tools such as Wireshark, TCP Dump, Security Onion, and Splunk
- Strong knowledge of the following:
- SIEM
- Packet Analysis
- SSL Decryption
- Malware Detection
- HIDS/NIDS
- Network Monitoring Tools
- Case Management System
- Knowledge Base
- Web Security Gateway
- Email Security
- Data Loss Prevention
- Anti-Virus
- Network Access Control
- Encryption
- Vulnerability Identification
- Experience in network/host vulnerability analysis, intrusion analysis, digital forensics, penetration testing, or related areas
- 5+ years of hands-on SOC/TOC/NOC experience
- GCIA and/or GCIH required. GCFA, GCFE, CISSP, Security +, Network +, CEH, RHCA, RHCE, MCSA, MCP, or MCSE preferred
- Familiarity with tools such as IDA Pro, PEiD, PEview, Procmon, Snort, Bro, Kali Linux, Metasploit, NMAP, and Nessus
- Familiarity with GPO, Landesk, or other IT Infrastructure tools
- Understanding and/or experience with one or more of the following programming languages: .NET, PHP, Perl, Python, Java, Ruby, C, C++.
- Minimum bachelor's degree in Information Security, Computer Science, or other IT-related field
- Exceptional candidates with proven experience in security/network operations will also be considered
-
Team Lead Firearms
1 week ago
Bass Pro Shops Spring, United States**EXCITING OPPORTUNITY AWAITS NEW STORE OPENING IN SPRING, TEXAS** · **Join our dynamic team as we embark on a thrilling journey with the opening of our newest store** · *** · **_:_** · Under the supervision of the Group Sales or Department Manager, the Team Leader gives daily di ...
-
Team Lead
1 week ago
Lamb Weston Washington, United StatesTitle: Team Lead - Accounts Payable · Location: Statewide Multi Use, WA · About Lamb Weston · We love making fries almost as much as you like eating them Since the 1950's, Lamb Weston has inspired customers with food they love, trust, and share with families and friends. As a lea ...
-
Team lead
6 days ago
BlueNova Industries Christopher, United States"We, as a sales and promotion agency, are in close contact with our customers on a daily basis. We present and sell the products entrusted to us with great passion, expertise, and dedication. As a team, we successfully tackle daily challenges with high agility and a lot of fun. J ...
-
Team Lead Used Firearms
5 days ago
Bass Pro Shops Spring, United States**EXCITING OPPORTUNITY AWAITS NEW STORE OPENING IN SPRING, TEXAS** · **Join our dynamic team as we embark on a thrilling journey with the opening of our newest store** · **__**_:_** · The Team Lead operates a business within a business. Their responsibilities are, but not limited ...
-
Team Lead
1 day ago
OTHSolutions Arlington, United StatesOTHSolutions is seeking a qualified individual to lead a team of management consultants, focused on providing both strategic planning and policy development support for a homeland security and critical infrastructure protection program. Duties include, but are not limited to, the ...
-
Technical/Team Lead
3 days ago
Trusted Advisors Washington, United StatesJob Description · Job DescriptionNous recherchons pour le compte d'une filiale d'une banque basée à Casablanca, Technical/Team Lead qui assurera une implémentation de la solution conformément à l'architecture, aux standards et normes techniques du groupe (en termes de qualité de ...
-
Eclipse Innovations Washington Park, United States"Everything I touched turned into shirts." Walter Seidensticker Sr. With a passion for fashion, a sense for trends, innovations, and uncompromising quality, this family-owned company has shaped the international market like no other for three generations. In every fiber of our pr ...
-
Team Lead, Technical Projects Consulting
1 week ago
DelCor Technology Solutions Silver Spring, United States**About Us**: · DelCor Technology Solutions, a privately held consulting firm based in Silver Spring, MD, has been providing technology consulting and IT support to associations and nonprofits for more than 35 years. Our success has been driven by our unmatched dedication to our ...
-
Cti Team Lead
1 week ago
Veterans Enterprise Technology Solutions Rosslyn, United StatesOverview: · Staffing Pros, a division of VETS Inc., is recruiting for a full-time CTI Team Lead. This is a Hybrid position located in Rosslyn, VA rotating every other week · - 3 days onsite and 2 days remote/2 days onsite and 3 days remote. Must work onsite for the first 90 days. ...
-
Business Intelligence Team Lead
6 days ago
OCT Consulting, LLC Washington, United States**Business Intelligence Team Lead ** · OCT Consulting, LLC is an SBA-certified, 8(a) small business management and technology consulting firm that provides support to Federal Government clients. We provide consulting services in the areas of Strategy, Process Improvement, Change ...
-
Document Operations Team Lead
1 week ago
General Dynamics Information Technology Washington, United StatesType of Requisition: · Regular · Clearance Level Must Currently Possess: · None · Clearance Level Must Be Able to Obtain: · None · Suitability: · Public Trust/Other Required: · Job Family: · Program Management · Job Qualifications: · **Skills**:Communication, Database Entry, Peop ...
-
Day Team Lead-dc
1 week ago
St Johns Community Services Washington, United StatesPosition provides support, training, supervision, and instruction to individuals in social, employment, emotional, and behavioral skills; supervises assigned staff; reviews individual support plans and completes data collection; transports individuals to and from various communit ...
-
Team lead for global demand
6 days ago
Crimson Enterprises Washington, United States**About Denk Pharma GmbH & Co. KG: ** · We are a modern company operating in more than 80 countries. Our goal is to provide access to healing. That's why we offer our patients worldwide the same high-quality pharmaceuticals that can be found in any German pharmacy. To ensure this ...
-
SOC Team Lead
3 days ago
BlueVoyant College Park, United StatesSOC Team Lead · This position is located in College Park, Maryland. · The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days of ...
-
Data Sharing and Governance Team Lead
6 days ago
OCT Consulting, LLC Washington, United States**Data Sharing and Governance Team Lead ** · OCT Consulting, LLC is an SBA-certified, 8(a) small business management and technology consulting firm that provides support to Federal Government clients. We provide consulting services in the areas of Strategy, Process Improvement, C ...
-
Team Lead DevOps Sénior
21 hours ago
Trusted Advisors Washington, United StatesJob Description · Job DescriptionNous recherchons pour le compte d'une filiale d'une banque internationale, basée à Casablanca, un Team Lead DevOps Sénior qui sera rattaché au Directeur de la Digital Factory et qui aura pour mission le suivi des chantiers et coordination de l'équ ...
-
Mobile Device Support Team Lead
1 week ago
General Dynamics Information Technology Washington, United StatesType of Requisition: · Regular · Clearance Level Must Currently Possess: · None · Clearance Level Must Be Able to Obtain: · None · Suitability: · Public Trust/Other Required: · Job Family: · Help Desk · Job Qualifications: · **Skills**:Apple iOS, Help Desk Operations, Mobile Appl ...
-
Team Lead Clinical Lab Support
5 days ago
Children's National Hospital Washington, United States**Description** · The Team Lead Clinical Lab Support will coordinate the daily operational functions of the laboratory's Support Services section. Ensure staff effectively · respond to customers needs. Oversee tasks performed by laboratory associates. Serve as liaison to house st ...
-
SOC Team Lead
2 days ago
BlueVoyant College Park, United StatesSOC Team Lead · This position is located in College Park, Maryland. · The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days ...
-
SOC Team Lead
18 hours ago
BlueVoyant College Park, United StatesJob Description · Job DescriptionSOC Team Lead · This position is located in College Park, Maryland. · US Citizenship required for this role. · The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. ...
SOC Team Lead - College Park, United States - BlueVoyant
Description
SOC Team Lead
Check you match the skill requirements for this role, as well as associated experience, then apply with your CV below.
This position is located in College Park, Maryland.
The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off)
BlueVoyant is looking for Security Operations Center (SOC) Team Lead to help our global customers manage their IT security. You will be part of a fast-paced team that helps customers to reduce the impact of security incidents and ensures that critical business operations continue unhindered.
Key Responsibilities
Basic Qualifications
Preferred Competencies
Education
About BlueVoyant
At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy Actionability Timeliness Scalability
Led by CEO, Jim Rosenthal, BlueVoyant's highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.
Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.
All employees must be authorized to work in the United States. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
Disclaimer: Please note that pursuant to contractual requirements and applicable law, in order for employees to perform work on some of the company's federal contracts, U.S. citizenship is required. Accordingly, an employee's ability to perform work on such contracts is contingent upon the company's verification of the employee's citizenship status. Furthermore, individuals may be subject to additional background checks and fingerprinting.