- Remote
- Remote
- 5+ years
Support the Department of Defense Education Activity (DoWEA) Enterprise Cyber Program by monitoring, analyzing, and responding to security events in a remote SOC environment.
Compensation
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
Responsibilities
- Monitor and analyze network traffic, system logs, and other security data for signs of malicious activity.
- Use Security Information and Event Management (SIEM) tools to investigate security alerts and notable events.
- Manage incidents throughout their lifecycle, including analysis, triage, containment, and remediation.
- Recommend improvements to prevent future incidents and expedite response based on lessons learned.
- Communicate effectively and promptly with technical and nontechnical stakeholders.
Requirements
- Nice to have: Microsoft Sentinel
- Nice to have: forensic investigation
- Nice to have: malware analysis
- Nice to have: strong curiosity
- Nice to have: problem-solving skills