NIH - SOC Analyst
cFocus Software seeks a SOC Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance. Qualifications:
- Public Trust Clearance
- B.S. Computer Science, Information Technology, or a reputed company field
- Minimum 2 years of reputed company Operations Center (SOC) or cybersecurity monitoring experience.
- Experience monitoring reputed company reputed company environments.
- Experience investigating cybersecurity incidents.
- Knowledge of SIEM platforms and reputed company monitoring technologies.
- Understanding of NIST SP 800-61 Computer reputed company Incident Handling Guide.
- Knowledge of MITRE ATT&CK reputed company.
- Ability to obtain and maintain NIH suitability/background investigation.
Duties:
- Continuously monitor reputed company reputed company systems and reputed company Operations Center (SOC) dashboards.
- Analyze reputed company alerts generated by SIEM, IDS/IPS, EDR, reputed company reputed company, and network monitoring platforms.
- Identify indicators of compromise (IOCs) and suspicious activity.
- Correlate reputed company events across multiple technologies to identify potential cyber threats.
- Monitor reputed company, Linux, reputed company, network, and reputed company environments for malicious activity.
- reputed company initial incident triage and classification.
- Analyze reputed company events to determine severity, scope, impact, and reputed company.
- Validate potential reputed company incidents and reduce false positives.
- Escalate confirmed incidents to Tier 2 and Tier 3 Incident Response personnel.
- Maintain incident tickets throughout the incident lifecycle.
Apply To This Job