Security Operations Center (SOC) Analyst

Monitors dashboards and intrusion detection and prevention systems (IDS/IPS); performs initial analysis and investigation into alerts as they are seen (to include anti-virus and phishing alerts); performs initial malware analysis utilizing automated means; supports cyber defense functions to protect COH from cyber security incidents that have potential to cause negative impact; incident intake, ticket updates and reporting of cyber events; utilizes SOC monitoring devices (SIEM, IDS, DLP) to review and analyze pre-defined events indicative of incidents; understanding, identifying and researching IOCs; uploading packets and evaluating source/destination activity and payloads; assists in recommendations for content to detect incidents, including IOCs for blocking and detection.

Education:Bachelor's Degree in Engineering, Computer Information or Information Technology, Cybersecurity or Information Assurance or equivalent work experience of 5 or more years.

Certifications:

GIAC Security Essentials: Network, Endpoint & Cloud (GSEC)

GIAC Advanced Security Essentials – Enterprise Defender (GCED)

GIAC Blue Team Fundamentals: Security Operations and Analysis (GSOC)

GIAC Hacker Tools, Techniques, and Incident Handling (GCIH)

#J-18808-Ljbffr