Description

You will support Cyber Defense and Operations programs, focusing on SOC, incident response, threat monitoring, and EDR management.

Responsibilities

• Manage day-to-day alert triage and escalation from SIEM, IDS/IPS, EDR, email, and web security tools.
• Investigate, resolve, and conduct forensic analysis of security breaches to determine root causes.
• Analyze SIEM logs, network traffic, and endpoint data to identify anomalies and indicators of compromise.
• Review, test, and improve the Incident Response Plan and maintain SOC operational procedures.
• Oversee log source coverage across workstations, servers, cloud platforms, and network devices.
• Monitor trending TTPs and tune security tools to optimize detection capabilities.

Required Skills

• 4+ years of Information Security experience.
• 3+ years of experience responding to cybersecurity events and incidents.
• Hands-on experience with SIEM, IDS/IPS, and EDR technologies.
• Knowledge of security frameworks including Cyber Kill Chain, MITRE, NIST, ITIL, SANS, NERC CIP, CIS, CMMC, or OWASP.
• Ability to communicate technical findings to both engineers and senior leadership.
• Bachelor's degree in information security or equivalent work experience.
• One or more of the following certifications: Security+, GCIA, GCIH, CEH, or CISSP.

Key Skills

Education

Any Graduate