Foxhole Technology · 4 months ago
SOC Analyst II
Foxhole Technology is a recognized leader in cybersecurity and IT support for federal agencies. They are seeking an experienced SOC Analyst II to manage cybersecurity risks and support a critical Government program by detecting and mitigating unauthorized use of materials and monitoring security controls.
Information Technology
Responsibilities
Detect and mitigate unauthorized use of materials
Identify vulnerabilities, prevent content exploitation, and reduce potential legal and financial risks
Continuously monitor malware detection software tools
Monitor network-based security sensors for anomalies and unauthorized activities
Monitoring security controls and initiating event/incident handling processes
Provide summary reports on collaborative efforts with DoD and non-DoD organizations, including recommendations to improve malware protection strategies
Provide quarterly Cybersecurity reports on the security posture of DCMA information systems
Integrate Zero Trust component logs and events into existing SIEM/SOAR platforms
Develop custom dashboards, alerts, and reports to monitor policy enforcement and detect anomalous behavior
Develop and implement SOAR playbooks for automated response to violations or detected threats
Document and address deficiencies noted through detection activities, specifically regarding tool misconfigurations, policy gaps, or architectural weaknesses
Provide technical knowledge and analysis of security incident responses
Perform forensic analysis of devices involved in incidents
Investigate potential intrusions and security events to contain and mitigate incidents
Research cyber-attacks, malware, and threat actors to determine potential impact and develop remediation guidance
Effectively communicate incident response activities
Maintain the confidentiality and integrity of the data within SIEM
Provide timely and accurate reports to management
Collaborate with vendors to ensure proper best practices are enforced and recommendations are delivered
Produce high-quality written and verbal communications, recommendations, and findings to management in a timely manner
Attend focus groups, trainings, industry conferences, and skills enhancement opportunities
Provide timely escalation of events to appropriate teams and external parties
Possess and apply a comprehensive knowledge across key tasks and high impact assignments
Evaluate performance results and recommends major changes affecting short-term project growth and success
Qualification
Required
Active DoD Secret security clearance
Between 3-5 years of progressive incident response experience
DoD IAT II required certification/s (one of the following) CCNA-Security, CySA+ (CSA+), GICSP, GSEC, Security+ CE, CND, SSCP
CSSP-A required certification/s (one of the following) CEH, GCIA, GCIH, CySA+
Think analytically
Effective verbal and written communication skills
Make decisions
Observe/remember details
Interpret data
Concentrate on tasks
Adjust to change
Handle stress/emotions
Regular attendance
Maintain work schedule
Attend meetings
Meet deadlines
Keyboard/type
Handle confidential information
Use math/calculations
Stay organized
Operate office equipment
May direct others
May be exposed to dust/dirt, humidity, and noise