Apex Systems
Sr. SOC Analyst
Apex Systems, Alexandria, Virginia, us, 22350
Job Title: Tier 2 SOC Analyst
Location: Alexandria, VA (Fully Onsite)
Employment Type: 6-Month Contract to Hire
Client: Government
Clearance Required: TS/SCI
Job Description:
HOW A CYBER SECURITY SOC ANALYST WILL MAKE AN IMPACT:Must have strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware AnalysisExperience and ability to analyze information technology security events to discern events that qualify as legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response.Must be knowledgeable and have hands-on experience with Splunk Security Information and Event Management (SIEM) System.Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting.Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, network traffic, IDS/IPS events for malicious intent).Excellent organization and attention to details in tracking activities within various Security Operation workflows.A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.Experience with one or more of the following technologies Network Threat Hunting, Big Data Analytics, Endpoint Threat Detection and Response, SIEM, workflow and ticketing, and Intrusion Detection System.Provide Cyber Security/Threat Hunting expertise and deep analysis of raw data from assets supporting Network Security Services, Endpoint Security Services, and Cybersecurity Data Analysis ServicesProactively search and identify indicators of compromise and anomalous behavior which is indicative of malicious behavior that has not yet met the event/incident threshold, or has not been detected by automated security toolsAssess data from multiple sources and navigates the cyber terrain to identified suspicious behaviorProvide input to the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status ReportIdentify potential conflicts with implementation of any CND tools within the enterprise and develop recommendations to remediate these conflictsDemonstrate systems experience using Security Information and Event Management (SIEM) and and Incident Response analysisKnowledge of Network Intrusion Detection System/Intrusion Prevention Systems (NIDS/IPS) as well as Host Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS)Knowledge of Security Orchestration Automation and Response (SOAR), Endpoint and Network Detection and Response (EDR/NDR) and User Behavior Analytics (UBA)Ability to demonstrate strong analytical and problem-solving, and also leverage interpersonal, organizational, writing, communications, and briefing skillsWHAT YOU'LL NEED TO SUCCEED:
Education: BS/BA degree or equivalent work experience and technical certs/training.Required Experience: 8+ years of related experience in Cyber Security, Security Operation Center (SOC) Analysis and Threat Hunting.Required: DoD 8570 certs: CEH cert is required but will also consider GSOC, CFR, GCIH, GCIA and/or GSEC, CSSP Analyst - required to Start (CEH, CFR, CCNA Cyber Ops, CySA+**, GCIA, GCIH, GICSP, SCYBER)US Citizenship Required due to the TS/SCI clearance requirement.Required Skills and Abilities: Communication, presentation, problem solving, analytical skills, detail oriented, and knowledge of server and client operating systems.Required Technical Skills: Cyber Security SOC Analysis Tier II/III and Threat Hunting work experience. Working knowledge of Splunk Enterprise Security, Palo Alto, RSA Netwitness Full Packet Capture (PCAP) system, Cisco Firepower IPS, and Crowdstrike EDR.Security Clearance Level: Active TS/SCI requiredPreferred Skills: Knowledge of current and emerging threats/threat vectors, and vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)Location: On Customer Site in Newington VA, Monday through Friday, 1st shift only. No weekends or nights.
EEO Employer
Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178.
Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.
Location: Alexandria, VA (Fully Onsite)
Employment Type: 6-Month Contract to Hire
Client: Government
Clearance Required: TS/SCI
Job Description:
HOW A CYBER SECURITY SOC ANALYST WILL MAKE AN IMPACT:Must have strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware AnalysisExperience and ability to analyze information technology security events to discern events that qualify as legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response.Must be knowledgeable and have hands-on experience with Splunk Security Information and Event Management (SIEM) System.Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting.Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, network traffic, IDS/IPS events for malicious intent).Excellent organization and attention to details in tracking activities within various Security Operation workflows.A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.Experience with one or more of the following technologies Network Threat Hunting, Big Data Analytics, Endpoint Threat Detection and Response, SIEM, workflow and ticketing, and Intrusion Detection System.Provide Cyber Security/Threat Hunting expertise and deep analysis of raw data from assets supporting Network Security Services, Endpoint Security Services, and Cybersecurity Data Analysis ServicesProactively search and identify indicators of compromise and anomalous behavior which is indicative of malicious behavior that has not yet met the event/incident threshold, or has not been detected by automated security toolsAssess data from multiple sources and navigates the cyber terrain to identified suspicious behaviorProvide input to the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status ReportIdentify potential conflicts with implementation of any CND tools within the enterprise and develop recommendations to remediate these conflictsDemonstrate systems experience using Security Information and Event Management (SIEM) and and Incident Response analysisKnowledge of Network Intrusion Detection System/Intrusion Prevention Systems (NIDS/IPS) as well as Host Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS)Knowledge of Security Orchestration Automation and Response (SOAR), Endpoint and Network Detection and Response (EDR/NDR) and User Behavior Analytics (UBA)Ability to demonstrate strong analytical and problem-solving, and also leverage interpersonal, organizational, writing, communications, and briefing skillsWHAT YOU'LL NEED TO SUCCEED:
Education: BS/BA degree or equivalent work experience and technical certs/training.Required Experience: 8+ years of related experience in Cyber Security, Security Operation Center (SOC) Analysis and Threat Hunting.Required: DoD 8570 certs: CEH cert is required but will also consider GSOC, CFR, GCIH, GCIA and/or GSEC, CSSP Analyst - required to Start (CEH, CFR, CCNA Cyber Ops, CySA+**, GCIA, GCIH, GICSP, SCYBER)US Citizenship Required due to the TS/SCI clearance requirement.Required Skills and Abilities: Communication, presentation, problem solving, analytical skills, detail oriented, and knowledge of server and client operating systems.Required Technical Skills: Cyber Security SOC Analysis Tier II/III and Threat Hunting work experience. Working knowledge of Splunk Enterprise Security, Palo Alto, RSA Netwitness Full Packet Capture (PCAP) system, Cisco Firepower IPS, and Crowdstrike EDR.Security Clearance Level: Active TS/SCI requiredPreferred Skills: Knowledge of current and emerging threats/threat vectors, and vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)Location: On Customer Site in Newington VA, Monday through Friday, 1st shift only. No weekends or nights.
EEO Employer
Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178.
Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.