Security Operations Center Specialist

Responsibilities

• Monitor security events and incident logs from various sources, including network devices, servers, endpoints, and security tools.
• Identify and analyze potential security incidents and anomalies, taking appropriate actions to investigate and elevate as required.
• Participate in incident response activities, including containment, eradication, and recovery procedures.
• Work closely with incident response teams and IT staff to mitigate the impact of security incidents and minimize the risk of recurrence.
• Stay updated with the latest cybersecurity threats and attack vectors.
• Analyze threat intelligence reports to proactively detect and respond to emerging threats.
• Operate and maintain security tools such as SIEM, IDS/IPS, antivirus, and other security‑related solutions.
• Conduct in‑depth analysis of security incidents, perform digital forensics, and document findings for future reference and improvement.
• Prepare and submit detailed incident reports, including root‑cause analysis and recommended remediation actions, to senior management and stakeholders.
• Implement continuous monitoring processes to ensure ongoing visibility into the security posture of the organization.
• Perform regular audits of security controls and configurations.
• Collaborate with the security awareness team to provide input into security training materials and awareness campaigns for employees, enhancing the overall security culture.
• Ensure compliance with established security policies, standards, and procedures.
• Assist in the development and maintenance of security policies as necessary.
• Provide clear and concise shift handover reports to SOC colleagues, ensuring accurate communication of ongoing incidents and pertinent information.

Requirements

• Ability to maintain TS/SCI clearance
• 10+ years’ experience (Bachelor’s degree in relevant field may be substituted for 5 years of relevant experience)
• Proven experience in a Security Operations Center (SOC) or similar role, with hands‑on experience in security monitoring, incident detection, and response.
• In‑depth knowledge of cybersecurity principles, threat landscape, and attack vectors.
• Familiarity with security tools and technologies, such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) systems.
• Understanding of incident response procedures and methodologies, including forensic analysis.
• Strong analytical and problem‑solving skills, with the ability to make quick decisions under pressure.
• Excellent communication skills to collaborate effectively with other team members, management, and external stakeholders.
• Required Do D 8140 compliant certification such as Comp TIA Security+
• Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
• Knowledge of industry compliance standards (e. g., NIST) and relevant regulations (e. g., GDPR, HIPAA) is advantageous.
• Willingness to work in a 24/7 rotational shift environment, including weekends and holidays.
• Core Competencies

Demonstrates extensive experience in Security Operations Center (SOC) functions, including security monitoring, incident detection, and response.

Proficient in utilizing security tools such as SIEM and IDS/IPS while ensuring compliance with industry standards and regulations.

#J-18808-Ljbffr