TSS - Cyber Security Analyst - SOC Tier II

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

Secret

Suitability:

Public Trust/Other Required:

None

Job Family:

Cyber Security

Job Qualifications:

Skills:

Computer Security Incident Response, Cybersecurity, Security Incident Response, Security Operations, SIEM Tools

Certifications:

Security Plus 301 - Security+

Experience:

3 + years of related experience

US Citizenship Required:

Yes

Job Description:

Technology Shared Services (TSS) is looking for a Tier II Security Operations Center (SOC) Analyst. As a member of the 24x7x365 TSS SOC team, the Cyber Security Analyst will be responsible for performing investigation and escalation of security alerts triaged by Tier I Analysts and others that enter the SOC from network and security systems/applications, the client, and/or from intelligence sources. The position may also require an Analyst to monitor and utilize third party toolsets in the client environment.

HOW A CYBER SECURITY ANALYST SENIOR WILL MAKE AN IMPACT

• Recognize common cyberattacks (e.g., DDoS, malware, phishing, etc.) and correlate them from various log sources
• Provide technical support on event logs and trend analysis
• Motivate self and co-workers to expand knowledgebase and capabilities
• Identify, document triage and report actions taken by malicious actors in customer networks in a timely manner
• Maintain a current understanding of the best practices and strategies used in cyber security
• Document threat intelligence from emerging sources, malware analysis reports, and discovered IOCs for security tool integrations

WHAT YOU’LL NEED TO SUCCEED:

• Bachelor’s Degree or equivalent work experience/certifications
• 1+ or more years of related experience
• Qualifying Certification to meet DoD IAT Level II (8570)
• Ability to Obtain DoD Secret clearance
• Experience on one of the following: Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)
• Experience with any SIEM or log aggregation system (Splunk preferred)

• This is a Hybrid position. You must reside in Louisiana full time. Relocation assistance is available.

 

PREFERRED QUALIFICATIONS:

• Experience with Crowdstrike or Qualys
• Strong analytical, organizational and project management skills
• Understanding of networking fundamentals, the OSI model, and TCP/IP protocols
• Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.)
• Experience reviewing network, host and application audit logs (system, security, etc.)
• Relevant security certifications (Network+, CEH, CCNA, etc.)
• Familiarity of security standards (NIST, FISMA, Fed RAMP, DCID, CNSS and DoD 8500)
• Knowledge of cloud IT solutions and security considerations of cloud solution deployment

GDIT IS YOUR PLACE:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays

The likely salary range for this position is $62,754 - $80,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Hybrid

Work Location:

USA LA Bossier City

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance