Maximus

Job-Specific Essential Duties and Responsibilities: 

• Respond to cyber incidents, including handling SOC IR phone calls and emails from clients and customer points of contact.
• Support detection, response, mitigation, and reporting of cyber threats affecting internal and external client networks.
• Maintain knowledge of current vulnerabilities, response, and mitigation strategies used in the cybersecurity operation center.
• Develop documentation, reports, briefs, and review SOPs with customers to accurately depict the current threat landscape and associated risks affecting client networks.
• Provide analysis of correlated information sources to clients as notified by the Cyber SOC Team Lead or Government Watch Officer.
• Serve as a Subject Matter Expert in investigations for potential incidents at the SOC Tier 1 level.
• Analyze and report cyber threats, assisting in deterring, identifying, monitoring, investigating, and analyzing computer network intrusions.
• Collaborate with SOC federal staff, Shift Lead, and Senior Analyst to analyze, triage, contain, and remediate security incidents.
• Follow Federal IRP, SOC SOPs, and other documentation procedures to work effectively while focusing on process improvement.
• Possess knowledge of multiple technology and system types.
• Articulate the incident response lifecycle clearly.

Job-Specific Minimum Requirements:

• Bachelor's degree with 8+ years of experience in cyber defense incident handling. Additional professional experience may be considered in lieu of a degree.
• 7+ years of SOC experience, including 3+ years in a senior or lead role, with direct experience in incident handling and response activities.
• Knowledge of security tools and the security stack.
• Hands-on experience with Splunk SIEM, including at least one year as a cybersecurity or security operations analyst.
• Basic understanding of network protocols and packet analysis tools.
• Certification: Splunk Fundamentals I & II, and at least one advanced certification such as CISSP, GCIH, GCIA, CEH or SecurityX/CASP.
• Clearance: Ability to obtain maintain a Public Trust clearance.