SOC Analyst (DoD Secret Clearance)

COMPANY OVERVIEW

Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field.

We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following:

• Be Driven - We are fueled by the hunger to learn more and do more.
• Be Curious - We engage in continuous improvement - never accepting the status quo.
• Be Humble - We seek honest feedback to strengthen our relationships.
• Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

Strive for excellence and consider joining our growing team today!

JOB OVERVIEW:

MartinFed has an opening for a SOC Analyst I to join our team of talented and diverse individuals. The SOC Analyst I provides:

• Timely identification of and response to events and resolution of issues arising from those events that indicate cyber incident.
• Monitoring and analysis of unclassified network and system security events, to determine potential system infection and/or compromise.
• Investigation support of incidents and performs correlation of events analysis to determine the incident type or attack that may be occurring.
• The NASA Security Operations Center is a 24/7/356 operation that requires coverage on all shifts. Once you are fully trained, you will be required to work on rotating shifts as needed for SOC coverage. The shifts are four 10-hour shifts, and your schedule would be Sun-Wed or Wed-Sat. The day shift is 7am-5pm, evening shift is 1pm-11pm, and night shift is 9pm-7am the following day.

ESSENTIAL FUNCTIONS:

• Provide stakeholder input into security tool network mapping and data flow.
• Monitor/log SOC Request/CNOC actions and response.
• Maintain visibility and interfaces directly, when required, on SOC requested CNOC block actions, Emergency Directive Mitigations, DNS Sinkhole actions, VPN Block actions, IP Sinkhole actions, and DOS/DDOS correlation and mitigations.
• Coordinate with the SOC/NOC engineering interface stakeholder.
• Monitor network/system compromise mitigations, and interfaces directly, when required.
• Maintain visibility on network outage and restoration actions.
• Interface with end user services as required.
• Assist in network investigations of significant incidents and reporting.

QUALIFICATIONS:

• United States Citizen with a DoD Secret clearance.
• Bachelor's Degree.
• Professional Certification (SEC+, CYSA+, GCIH).
• 2-4 Years of pointed Cybersecurity Experience.
• Experience reviewing and analyzing raw log data (Network Devices, System Logs, Flow Data, PCAP).
• Possess a strong foundation in network infrastructure design, routed data protocols, switches, data, and hardware platforms.
• Possess an understanding of Switches, Routers, Servers, Cables, Racks, Firewalls, LAN, WAN, TCP/IP, DNS, UDP, Latency, VoIP, QoS, Cisco VSS, Wireless LANs, VPN, VLANS, SNMP, and various routing protocols such as EIGRP, BGP, OSPF, and MPLS
• Possess excellent communication and interpersonal skills.

Desired Qualifications:

• Scripting experience (Python, Shell).
• Experience working in a security operations center.
• Experience with security incident event management tools such as AlienVault, Exabeam, LogRhythm or Splunk.
• Desired Certifications: CCNA Security, GDSA, GCIA.

Physical Requirements:

• General office environment.
• The work area is adequately lighted, heated, and ventilated. Some walking, standing, bending, reaching, and carrying of light items such as papers and books.
• Requires eye-hand coordination and manual dexterity sufficient to operate a keyboard, telephone, and other office equipment.

OTHER DUTIES:

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations.

If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling 855.212.1810. Thank you for your interest in MartinFed.

Please Note: All positions at MartinFed are contingent upon passing both a background check and drug screening prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer.