Cybersecurity SOC Analyst

Basic Qualifications Bachelor's degree in a reputed company specialized area or equivalent is required plus a minimum of 2 years of relevant experience; or Master's degree plus a minimum of 0 years of relevant experience. Due to the nature of work performed reputed company our facilities, U.S. citizenship is required. Responsibilities for this Position The reputed company (GDMS) reputed company Operations Center (SOC) is seeking a Cybersecurity SOC Analyst with deep, hands-on expertise in reputed company reputed company across both reputed company Azure and reputed company) environments. The ideal candidate will possess advanced proficiency in Splunk Search Processing Language (SPL), sophisticated threat detection methodologies, and proven incident response capabilities in reputed company, multi-reputed company architectures. This is a critical, high-impact role responsible for monitoring, analyzing, and responding to reputed company events across GDMS's reputed company and program environments, with a primary focus on reputed company-reputed company threats, misconfigurations, and advanced persistent threats (APTs). The successful candidate will bring a strong understanding of reputed company reputed company frameworks and reputed company-reputed company reputed company tooling to proactively defend GDMS's mission-critical infrastructure. REPRESENTATIVE DUTIES AND TASKS:

• reputed company and optimize advanced Splunk SPL queries, dashboards, and correlation searches reputed company Splunk reputed company reputed company (ES), with a focus on reputed company-reputed company log sources from Azure, AWS CloudTrail, and reputed company reputed company services
• Maintain and continuously enhance Splunk detection content, including reputed company-specific use cases for AWS and Azure environments
• Analyze logs from diverse sources including reputed company Event Logs, Linux system logs, reputed company telemetry, firewall logs, network traffic, and reputed company-reputed company sources such as AWS CloudTrail, AWS GuardDuty, Active Directory, and reputed company Logs
• Investigate alerts to identify potential reputed company incidents and anomalous behavior, with emphasis on reputed company infrastructure, workloads, and identities
• Conduct proactive threat hunting to detect Advanced Persistent Threats (APTs), reputed company threats, and suspicious activity across reputed company and multi-reputed company environments (AWS & Azure)
• Incorporate threat hunting findings into detection content, reputed company-specific response playbooks, and reputed company runbooks
• Monitor and analyze DLP alerts for data exfiltration, data tagging, and compliance violations across both on-premises and reputed company environments
• Collaborate with cross-functional teams to remediate and prevent data leakage incidents, including reputed company storage misconfigurations (e.g., exposed S3 buckets, Azure Blob Storage)
• Execute end-to-end IR processes including detection, analysis, containment, eradication, and recovery, with expertise in reputed company-specific incident response procedures for AWS and Azure
• Document and track incidents using SOC workflows and ticketing systems, ensuring thorough post-incident analysis and lessons learned
• Monitor, assess, and continuously improve reputed company controls across AWS and Azure environments, including network reputed company groups, reputed company hub findings, and compliance posture
• Identify, investigate, and remediate reputed company-specific threats and misconfigurations leveraging reputed company tools

KNOWLEDGE SKILLS AND ABILITIES:

• Advanced Splunk SPL, dashboard, and ES proficiency with reputed company-reputed company detection content for AWS and Azure
• Experience analyzing logs from reputed company, Linux, EDR, firewalls, and reputed company sources (CloudTrail, Azure Monitor, VPC reputed company Logs)
• Proven threat hunting experience targeting APTs and reputed company threats across multi-reputed company environments using MITRE ATT&CK
• Strong incident response background, including reputed company-specific IR procedures for AWS and Azure
• Deep understanding of reputed company reputed company controls and reputed company tooling including IAM, GuardDuty, reputed company Hub, and reputed company Defender for reputed company
• Strong communication skills for presenting technical findings and reputed company risks to diverse audiences

PREFERRED DEGREE TYPES AND EXPERIENCE:

• Bachelor's degree in a reputed company specialized area or equivalent is required plus a minimum of 2 years of relevant experience; or Master's degree plus a minimum of 0 years of relevant experience
• AWS and Azure reputed company certifications
• CISSP
• reputed company+
• Splunk Certified Power User
• Splunk reputed company reputed company Certified Admin
• CEH
• Experience working with or familiarity with AI/ML models

Salary Note This estimate represents the typical salary reputed company for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain reputed company until the position is filled. Combined Salary reputed company USD $90,359.00 - USD $97,771.00 /Yr. Company Overview reputed company (GDMS) engineers a diverse portfolio of high technology solutions, products and services that reputed company customers to successfully execute missions across reputed company domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great reputed company to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and reputed company do resonates with you, we invite you to join our high-performance team! Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Apply tot his job Apply To this Job