SOC Operations/Watch Floor Cybersecurity Analyst - Mid

Mid-level SOC Operations/Watch Floor Cybersecurity Analyst position supporting the FBI ESOC Watch Floor Operations Team in a 24/7 incident detection and response environment.

Responsibilities

• Monitor computer networks for security issues and potential intrusions.
• Investigate security breaches and other cybersecurity incidents.
• Document security breaches and assess the damage or impact.
• Partner with the security team to run tests that uncover network vulnerabilities, including penetration testing.
• Remediate detected vulnerabilities to maintain a high-security standard.
• Recommend IT security best practices.
• Install security measures and operate protective software and infrastructure controls, including firewalls and data encryption programs.
• Conduct analysis to confirm intrusion information and create a forensically sound duplicate of relevant files.
• Decrypt data as needed and provide technical summaries and supporting inputs.
• Examine recovered data for relevant information and perform dynamic analysis, including timeline, statistical, and file signature analysis.
• Perform real-time cyber defense handling tasks to support deployable Incident Response Teams (IRTs).

Requirements

• US Citizenship required.
• Active Top Secret clearance with SCI eligibility required.
• Minimum 5 years of relevant experience required.
• Bachelor’s Degree required.
• Experience with SIEM systems is preferred.
• Splunk experience required.
• Shift work capability required (24/7 operations).

Tools and Technologies

• SIEM
• Splunk
• Microsoft Sentinel

Shift Available

• Sun-Wed: 9pm-7am

Preferred Certifications

• GIAC Continuous Monitoring Certification (GMON)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Network Forensic Analyst (GNFA)

Location: Clarksburg, WV (onsite)