Responsibilities:

• Perform continuous monitoring and security incident triage through the review of SIEM events, network traffic data collection, and endpoint activity logs.
• Identify and collect relevant data associated with initial security investigation findings.
• Document and track investigations to resolution while creating detailed security alert notifications for customers.
• Escalate investigations requiring advanced analysis of security incidents to Tier 2 or incident responders.

Job Qualifications:

• 1+ years of experience monitoring and responding to intrusion attempts in a SOC or similar environment.
• Experience triaging security alerts, events, logs, and artifacts using SIEM tools.
• Familiarity with common threat vectors, attack methodologies, and basic incident handling processes.

Bonus Points:

• Hands-on experience integrating, deploying, and configuring security tools in an enterprise environment.
• Certifications in one or more of the following areas:
• Networking: Cisco, Palo Alto, Juniper.
• Security Tools: Splunk, Carbon Black, Cylance, McAfee, Tenable, FireEye, CrowdStrike, ELK.
• SANS/GIAC: GCIH, GREM, GCED, GCDA.
• Exposure to scripting or automation (e.g., Python, PowerShell) to improve SOC workflows.

Eligibility Requirement:

• Must hold an Active Secret clearance
• Must be a US Citizen Only (No Dual Citizenship, No Green Card Holder)

#LI-Defense #LI-Onsite