SOC Analyst (Evening Shift) / IT Specialist II

Title:

SOC Analyst (Evening Shift) / IT Specialist II

KBR has an immediate need for an energetic and dynamic Security Operations Center (SOC) Analyst (evening shift), known as an Active Response Center (ARC) Analyst at EROS, in support of the United States Geological Survey (USGS) Earth Resources Observation & Science (EROS) Center (http://eros.usgs.gov/) near Sioux Falls, SD (http://www.siouxfalls.org). 

 

This position is an integral part of the EROS Center-wide Information Technology Team (CITT). The role involves working as part of a 24x7 Active Response Center (ARC) team, with responsibility for monitoring the networks for security issues (using SIEM/log analysis toolsets), performing vulnerability scanning, threat intelligence and undertaking security incident response. 

 

The purpose of this role is to ensure that the EROS Center’s information and systems are protected, in accordance with the needs of the business and according to Information Security principles of availability, integrity and confidentiality. 

 

The ARC operates 24x7 and you will be required to work a shift pattern that covers this. This consists of a mixture of evenings and nights, Monday through Friday and rotation of weekend shifts. This position is being posted as an evening shift, which starts at 4:00 pm to 12:45 am.  Occasional travel may be required. 

The candidate must have previous 3 years US residency. 

This position may be filled by a KBR teammate on the TSSC Contract.  

 

Education: An AA or BS degree, or a degree in progress for IT related curriculum. Experience may be substituted for Education requirements, as applicable. 

 

Experience: Minimum of 1 year of directly related technical, professional experience required; additional experience of 4+ years is ideal. 

 

Experience and/or Education in lieu of these qualifications will be reviewed for applicability to meet these requirements. 

 

Required Skills: 

• Monitor the networks for malicious activity using Security Incident and Event Management (SIEM) toolsets. This will include responding to and investigating alerts, the development of new security monitoring use cases, and ensuring all investigative activity is properly documented in our ticketing systems and followed up with relevant support teams.  Triage issues escalated to the information security team, and ensure that appropriate follow-up actions are taken by the ARC. 
• Take responsibility for developing and maintaining ARC documentation and processes. 
• Take responsibility for monitoring open source intelligence sources for potential threats against the EROS Center, and ensure appropriate defensive actions are taken with respect to these. 
• Take responsibility for running vulnerability scans against EROS infrastructure, interpreting these and following up issues with relevant support team. 
• Highly motivated individual with a genuine enthusiasm for information security and technology; 
• Willingness to work shifts (including unsociable hours and holidays where these fall into your shift pattern) as part of a 24x7 team. 
• Sound understanding of information security principles and best practices; 
• Good infrastructure and technology experience including demonstrable understanding of security operations; 
• Goo