Cybersecurity Operations Analyst (SOC)

• Join a premier technology firm specializing in innovative solutions.  
• Be part of a collaborative, inclusive, and innovative work culture.  
• Enjoy tremendous growth potential in a high-performing team environment.  
• A robust benefits package: 
  • Health, dental, and vision insurance  
  • Life insurance  
  • Short-and-long term disability  
  • Paid time off (PTO)  
  • 401k retirement plan with employer match 
  • Annual Professional Development Reimbursement Program  
  • And more! 

• Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks/endpoints. 
• Perform junior- to intermediate-level review of massive log files, pivot between data sets, and correlate evidence for incident investigations.
• Pass triaged alerts to senior-level SOC personnel and assist in identifying malicious actors on customer networks.
• Document analysis, findings, and actions in a case/knowledge management system.
• Support senior-level SOC personnel with the creation and distribution of incident reports to customers and higher headquarters.

• Must have an active DoD TS/SCI
• Bachelor's degree and 4 years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of degree.
• 3 years of prior incident handling/response experience
• Experience working in a SOC environment is required.
• CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.
• Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).
• Demonstrated sound understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.
• DoD 8570 IAT level II or higher certification such as CompTIA Security CE, ISC2 SSCP, SANS GSEC prior to starting.
• DoD 8570 CSSP-A level Certification such as CEH, CySA , GCIA or other certification is required within 6 months of start.
• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cybersecurity domain and an ability to think and work independently.
• Strong analytical and troubleshooting skills.
• Willing to perform shift work, including weekend hours.

• Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g. NetFlow, Full Packet Capture), and other attack artifacts in support of incident investigations.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., ArcSight, Splunk, Nitro/McAfee Enterprise Security Manager, QRadar, LogLogic).
• Experience and proficiency with any of the following: Anti-Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, Network Forensics.
• Experience with malware analysis concepts and methods.
• Unix/Linux command line experience.
• Scripting and programming experience.
• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.
• Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.

• Customer Experience: Strive for excellence and delight our clients 
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions 
• Accountability: Take ownership of and pride in our actions and service delivery 
• Inspire: Be inspired to be your best self and have fun in the process 
• Integrity: Do the right thing, the right way, every time! 
• Stewardship: The careful and responsible management of something entrusted to our care. 

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.

Salary : $105,000 - $150,000