Description

Monitor and investigate security incidents to protect agency systems and data.

Responsibilities

• Monitor security events and alerts using Splunk, IDS/IPS, and EDR tools.
• Prioritize and triage security events based on severity, potential impact, and risk factors.
• Investigate suspicious activity to determine root causes and potential threats.
• Participate in incident response activities, including containment, eradication, and recovery.
• Document all security investigations, incident response activities, and remediation actions.

Required Skills

• 4+ years of experience in security operations or a similar role.
• Proficiency with Splunk (SIEM), IDS/IPS, and EDR tools.
• Strong understanding of security concepts, network protocols, and threat vectors.
• Experience with incident response, threat hunting, and threat intelligence.
• Ability to analyze security trends and report on metrics like MTTD and MTTR.
• Bachelor’s Degree in Information Technology, Cybersecurity, or a related field.
• Strong analytical, problem-solving, and technical documentation skills.

Preferred Skills

• Ability to collaborate effectively with SOC analysts and technical teams.

Key Skills

Education

Bachelor’s Degree