Summary:
The CIOCC Tier 1 Analyst shall be responsible for the following, but not limited to: Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, Network Access Control (NAC) and other client data sources
2nd shift 12:00 - 10:00 PM or 3rd shift 8:00 PM to 6:00 AM
• 1-3 years of security operations center environment experience or recent college graduate with industry certifications.
• Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity
• Excellent written and verbal communication skills required. Must be able to communicate technical details clearly
• Splunk or similar SIEM tool
• MUST BE A US CITIZEN
• MUST BE ABLE TO OBTAIN AND MAINTAIN THE REQUIRED AGENCY CLEARANCE
Preferred
• CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. – One or more preferred
• IDS Log analysis skills
• Packet Capture tools and analysis
• Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP)
• Target second shift (1200-2200) or third shift (2000-0600) depending on staffing needs.
• This position is hybrid on-site in Rockville, MD.