SOC Analyst

College Park, US-MD, US

Apply now Apply later

Position Description
ERT is seeking a SOC Analyst to support work at the NOAA National Environmental Satellite Data and Information Service (NESDIS) Office of Satellite and Product Operations (OSPO). This position will support OSPO/s Security Management Center (SMC) Team in responding to security incidents and other emergency actions. Duties include reviewing and analyzing IT system audit logs, responding and managing Incident Response (IR), and coordinating with the systems’ ISSOs and the NOAA Cybersecurity Center (NCSC).

Requirements
A minimum of 6 years of experience in the following:

  • Database Management System (DBMS) administration/design/implementation experience
     
  • Hands-on experience with SQL, NoSQL DBMS tools, Splunk, and Security Information and Event Management (SIEM) tools (e.g., ArcSight and Tripwire)
     
  • Advanced programming languages such as Python, C++, JavaScript, HTML, and PHP
     
  • Forensic analysis (network and/or digital) to include collection of artifacts and familiarity of chain of custody procedures
     
  • Familiarity with Vulnerability Management (VM) processes including VM tool experience and analysis of completed VM scans
     
  • Ability to review and track remediation of vulnerabilities and identify DISA STIG gaps via multiple scan resources
     
  • Previous experience supporting DHS CISA Binding Operational Directives (BOD) procedures including system notification, impact analysis and tracking, documented remediation, and CISA reporting requirements
     
  • Proficiency with the following tools highly desired: Splunk (Log Aggregator), ArcSight (SIEM), Tripwire (file/system integrity tool), Tenable Security Center (SC) (Vulnerability Scanning tool), IBM BigFix Suite (Patching), FireEye, and CSAM
     
  • At least one of the following certifications is required: Security+ or Network+, GSEC, GCIA, GCIH, C|EH, GCFE, Splunk fundamentals I or II Engineering or IT Sec architecture 
     
  • Willingness to be “On-Call” to support 24x7x365 for Incident Response (IR) and other emergency actions when requested

Must be a US Citizen or Permanent Resident who has lived in the United States at least 3 out of the last 5 years and be able to pass a background investigation to obtain a security badge to access applicable government facilities and systems.

Education
B.S. in Engineering or related technical field, or equivalent combination of education and experience.

Location
The position is on-site at NOAA’s Satellite Operations Facility in Suitland, MD. Telework permitted when not requested to be on site for Incident Response.

Salary
The salary range for this role is $66,000 - 242,000/year. This range is a good faith estimate based on similar roles across the organization. ERT considers several factors when extending an offer of employment, including the location, scope, and associated responsibilities of the specific position, as well as a candidate’s work experience, education/training, and key skills.

Benefits
All full-time employees are eligible to participate in our flexible benefits package, which includes:

  • Medical, Rx, Dental, and Vision Insurance
  • 401(k) retirement plan with company-matching
  • 11 Paid Federal Government Holidays
  • Basic Life & Supplemental Life
  • Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
  • Short-Term & Long-Term Disability
  • Employee assistance program (EAP)
  • Tuition Reimbursement, Personal Development & Learning Opportunities
  • Skills Development & Certifications
  • Professional Membership Reimbursement
  • Employee Referral Program
  • Competitive compensation plan
  • Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company’s performance
  • Publication and Conference Presentation Awards with bonuses

ERT is a VEVRAA Federal Contractor and Equal Opportunity/Affirmative Action employer - All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, or protected Veteran status.

Apply now Apply later
Job stats:  1  0  0

Tags: ArcSight C CISA DISA GCFE GCIA GCIH GSEC Incident response JavaScript NoSQL PHP Python SIEM SOC Splunk SQL Tripwire Vulnerabilities Vulnerability management

Perks/benefits: Career development Competitive pay Flexible spending account Health care Insurance Salary bonus

Region: North America
Country: United States

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.