Responsibilities:

• Perform continuous monitoring and security incident triage through the review of SIEM events, network traffic data collection, and endpoint activity logs.
• Identify and collect relevant data associated with initial security investigation findings.
• Document and track investigations to resolution while creating detailed security alert notifications for customers.
• Escalate investigations requiring advanced analysis of security incidents to Tier 2 or incident responders.

Job Qualifications:

• 2+ years of experience monitoring and responding to intrusion attempts in a SOC or similar environment.
• Hands-on experience triaging security alerts, events, logs, and artifacts using SIEM tools.
• Familiarity with common threat vectors, attack methodologies, and basic incident handling processes.

Bonus Points:

• Hands-on experience integrating, deploying, and configuring security tools in an enterprise environment.
• Certifications in one or more of the following areas:
• Networking: Cisco, Palo Alto, Juniper.
• Security Tools: Splunk, Carbon Black, Cylance, McAfee, Tenable, FireEye, CrowdStrike, ELK.
• SANS/GIAC: GCIH, GREM, GCED, GCDA.
• Exposure to scripting or automation (e.g., Python, PowerShell) to improve SOC workflows.

Eligibility Requirement:

• Must hold an Active Secret clearance
• Must be a US Citizen Only (No Dual Citizenship, No Green Card Holder)

This is 100% onsite role in St Louis, MO

#LI-Defense #LI-Onsite 

Responsibilities:

• Analyze data patterns and outliers to identify threat actor TTPs, post-compromise behavior, and insider threats.
• Create and modify SIEM dashboards to enhance visibility into threat landscapes and monitor activity.
• Provide expert-level analysis and investigative support for large-scale and complex security incidents.
• Detect advanced persistent threats (APT) and insider threats through proactive hunting and behavioral analysis.
• Conduct dynamic and static malware analysis to identify Indicators of Compromise (IOCs) and threat vectors.

Job Qualifications:

• 4+ years of experience with incident response, preferably in a SOC environment.
• Hands-on experience leading security incident investigations through containment, remediation, and final reporting.
• Proficiency in threat hunting, malware analysis, and forensic tools.

Bonus Points:

• Advanced certifications such as GCIA, GCFE, GREM, CISSP, or OSCP.
• Experience with EDR tools and threat intelligence platforms.
• Familiarity with MITRE ATT&CK framework and its application in threat detection.
• Background in scripting or automation to improve detection and analysis capabilities.

Eligibility Requirement:

• Must hold an Active Secret clearance
• Must be a US Citizen Only (No Dual Citizenship, No Green Card Holder)

This is 100% onsite role in St Louis, MO

#LI-Defense #LI-Onsite 

Responsibilities:

• Perform advanced analysis to identify threat actor TTPs, post-compromise behaviors, and insider threats.
• Develop and refine SIEM dashboards to enhance threat detection and monitoring capabilities.
• Lead and manage a team of Tier 1 and Tier 2 analysts, providing mentorship and training.
• Provide expert-level investigative support for large-scale and highly complex security incidents.
• Conduct advanced malware analysis and forensic investigations, including evidence collection and preservation.
• Drive threat hunting activities using behavioral analysis and intelligence-driven methodologies.
• Collaborate with senior leadership and clients to communicate findings, risks, and mitigation strategies.

Job Qualifications:

• 6+ years of experience with incident response, digital forensics, or threat hunting.
• Hands-on experience conducting malware analysis, DFIR, and CTI investigations.
• Proficiency with forensic tools such as Encase, Forensic Toolkit (FTK), and XRY.
• Expertise in forensic evidence collection, preservation, and chain of custody protocols.
• Experience interacting with senior-level leadership, including client stakeholders.
• 2+ years of experience leading SOC teams or managing medium-to-large teams in a security capacity.

Bonus Points:

• Certifications such as CISSP, GREM, OSCP, or GCFA.
• Experience with proactive threat modeling and adversary emulation.
• Strong knowledge of cloud security frameworks and tools (e.g., AWS, Azure, GCP).
• Ability to develop SOC playbooks and processes to improve operational efficiency.

Eligibility Requirement:

• Must hold an Active Secret clearance
• Must be a US Citizen Only (No Dual Citizenship, No Green Card Holder)

This is 100% onsite role in St Louis, MO

#LI-Defense #LI-Onsite