Knowledge Services
Security Operation Center Analyst 2 (remote)
Knowledge Services, Augusta, Maine, us, 04338
OverviewKnowledge Services is seeking a Security Operation Center Analyst (SOC Analyst) for a contract through the end of June 2025 (likely for extension) with the State of Maine Office of Technology.
Applicants are able to work 100% remotely, but must have prior State government experience.
ResponsibilitiesSecurity Operation Center Analyst Responsibilities:
• The Information Security Office (ISO), Security Operations Center (SOC) is at the forefront of the State of Maine defense against cyber threats.
• The position works to protect the devices on the State of Maine network.
• This position will perform continuous monitoring of critical systems for the State of Maine.
• The candidate will be a member of a team focused on endpoint detection and response, antivirus protection, endpoint investigations, and other endpoint security, engineering, and incident response activities.
• The position will also support the SOC Team Leads and the Security Operations Manager in adequately meeting and addressing the operational demands within the SOC.
QualificationsSecurity Operation Center Analyst Required Skills:
• Must have at least 5 years of information security experience, with a focus on Endpoint Security, Incident Response, and Security Engineering within an enterprise environment.
• Must have experience with Endpoint Security• Must have experience with Incident Response• Must have experience with Engineering Security Protocols
Preferred:
• The ideal candidate will have knowledge of Windows and Linux systems and their associated scripting languages, experience with AWS or Azure cloud environments, and will have worked with endpoint security platforms such as Microsoft Defender for Endpoint, FireEye, CrowdStrike, McAfee, or similar, and with vulnerability testing products such as Windows Defender TVM, Tenable Nessus, Rapid 7 InsightVM, Qualys, or similar.
• Experience with any of the popular SIEM platforms is also desired (Splunk, Azure Sentinel, Sumo Logic, LogRhythm, Elasticsearch, etc.• A four-year college degree in computer science or a related field with advanced study preferred
• One or more relevant technical security certifications are a plus (GIAC, ISC2, CompTIA, EC Counsel, etc.)
We are an Equal Opportunity Employer. We do not discriminate on the basis of race, religion, color, sex, age, national origin or disability.
INDIT
ISDPD
Applicants are able to work 100% remotely, but must have prior State government experience.
ResponsibilitiesSecurity Operation Center Analyst Responsibilities:
• The Information Security Office (ISO), Security Operations Center (SOC) is at the forefront of the State of Maine defense against cyber threats.
• The position works to protect the devices on the State of Maine network.
• This position will perform continuous monitoring of critical systems for the State of Maine.
• The candidate will be a member of a team focused on endpoint detection and response, antivirus protection, endpoint investigations, and other endpoint security, engineering, and incident response activities.
• The position will also support the SOC Team Leads and the Security Operations Manager in adequately meeting and addressing the operational demands within the SOC.
QualificationsSecurity Operation Center Analyst Required Skills:
• Must have at least 5 years of information security experience, with a focus on Endpoint Security, Incident Response, and Security Engineering within an enterprise environment.
• Must have experience with Endpoint Security• Must have experience with Incident Response• Must have experience with Engineering Security Protocols
Preferred:
• The ideal candidate will have knowledge of Windows and Linux systems and their associated scripting languages, experience with AWS or Azure cloud environments, and will have worked with endpoint security platforms such as Microsoft Defender for Endpoint, FireEye, CrowdStrike, McAfee, or similar, and with vulnerability testing products such as Windows Defender TVM, Tenable Nessus, Rapid 7 InsightVM, Qualys, or similar.
• Experience with any of the popular SIEM platforms is also desired (Splunk, Azure Sentinel, Sumo Logic, LogRhythm, Elasticsearch, etc.• A four-year college degree in computer science or a related field with advanced study preferred
• One or more relevant technical security certifications are a plus (GIAC, ISC2, CompTIA, EC Counsel, etc.)
We are an Equal Opportunity Employer. We do not discriminate on the basis of race, religion, color, sex, age, national origin or disability.
INDIT
ISDPD