Description

Manage security operations and incident response within a Security Operations Center environment.

This role is remote.

Responsibilities

• Monitor security events and alerts using SIEM, IDS/IPS, and firewalls.
• Investigate and respond to security events, including malware infections and network intrusions.
• Analyze security incidents to determine threat nature and extent.
• Conduct vulnerability assessments and penetration testing to identify weaknesses.
• Develop incident response plans and document root cause analysis.

Required Skills

• 7 years of experience in a SOC or related security role.
• Proficiency with SIEM, IDS/IPS, and firewalls.
• Experience with vulnerability assessment tools for databases, web apps, and servers.
• Working knowledge of FISMA/NIST information security regulations.
• Experience securing Windows and Unix servers and workstations.
• Strong understanding of networking protocols and security infrastructure.
• Knowledge of IT security best practices for anomaly detection and troubleshooting.

Preferred Skills

• Certifications such as CISSP, CISM, CISA, or GIAC/SANS.
• Advanced Cisco or Microsoft certifications (CCNP, CCIE, MSCE).
• K knowledge of HIPAA, IRS, and Social Security Administration security standards.

Key Skills

Education

Any Graduate