Description

You will manage security operations and incident response within a Security Operations Center environment.

Responsibilities

• Monitor security events and alerts using SIEM, IDS/IPS, firewalls, and other security tools.
• Investigate and respond to security events, including malware infections, network intrusions, and unauthorized access attempts.
• Perform analysis of security incidents to determine threat nature and extent.
• Conduct vulnerability assessments and penetration testing to identify weaknesses and recommend remediation.
• Develop and maintain incident response plans, documenting root cause analysis and remediation steps.

Required Skills

• 7 years of experience in a SOC or related security role.
• Proficiency with SIEM (Security Information and Event Management), IDS/IPS, and firewalls.
• Experience with vulnerability assessment tools across databases, web applications, Windows/Unix file servers, and data networks.
• Working knowledge of FISMA/NIST information security regulations and guidelines.
• Experience securing Windows and Unix servers and workstations.
• Strong understanding of networking protocols and security infrastructure components.
• Working knowledge of IT security best practices for networks, protocol analysis, anomaly detection, and troubleshooting.

Preferred Skills

• Certifications such as CISSP, CISM, CISA, or GIAC/SANS.
• Advanced Cisco or Microsoft certifications (CCNP, CCIE, MSCE).
• Knowledge of HIPAA, IRS, and Social Security Administration security standards.

Key Skills

Education

Any Graduate