David T. Scott & Associates, LLC (DTS) is a Service-Disabled Veteran Owned Small Business that serves public- and private-sector clients. DTS excels at helping our clients respond to daunting challenges related to program management/governance, cyber security, strategic planning/organizational advancement, business process efficiency and learning enhancement. Our staff is comprised of seasoned experts with exceptional military, civilian and private sector experience.

DTS is looking for Security Operations Center (SOC) Analyst (Tier1). The position is remote for an organization headquartered in Arlington, Virginia and will be part of a team that supports cyber security programs and provides technical support.

A SOC Analyst is a professional who supports a company's cyber security operations and continuous monitoring needs. They are the first to respond to and take action against cyber-attacks. They identify, analyze, and resolve the issues related to security. They also inform the management about cyber threats to enable the relevant stakeholders to take necessary measures to ensure the security of the sensitive information and data of the organization from bad actors and insider threats.

Duties:

Monitor network activity and alerts/incidents created and conducts initial incident response investigations using Security Incident and Event Management (SIEM) tools
Gather relevant alert/incident information and closes as appropriate
Escalate security incidents to the appropriate team or individual
Review automated response activities for accuracy of information
Support SOC operations reporting through creation of evidence artifacts and reports
Assist with continuous monitoring of security controls
Deploy analytic rules and queries to client environments
Update environment settings in response to threat intelligence and incidents observed
Perform initial device remediation in relation to security incidents
Stay current on security trends and updates to related tools
Test and implements security automation
Assist in configuring client environments and migration of devices

Skills:

Problem Solving: Ability to approach security related problems from an analytical mindset. Develop multiple solutions to a problem and realize the solution is not always a readily available answer. Apply automation techniques where it makes sense.
Decision Making: Position requires a significant amount of autonomy and decisiveness. You must be able to make informative decisions quickly, accurately, and with evidence to support your decision.
Multitasking: Position has responsibilities across multiple independent cloud environments, each with unique needs and concerns. You must be able to switch tasks rapidly and work on multiple concurrent responsibilities.
Communication: Excellent verbal and written communication skills, interpersonal, and teaching skills are required. This position interacts with clients on a regular basis and professional communication is a must. Team member must be able to effectively communicate with users at all levels of technical knowledge and explain

concepts in an easy-to-understand manner. Additionally, deliverables are to be professionally written and communicated in a concise manner, with a focus on the intended audience.

Following Instructions: Ability to follow verbal and written instructions and recreate results desired. Many process are standard and must be able to be duplicated.
Trends: Stay current on best practices, security trends, and attack techniques. Use knowledge gained to apply security controls and automation to environment to detect compromise and remediate vulnerabilities.

Education, Experience & Certifications:

A Bachelor's degree in cybersecurity, information security, or related field
6 months to 3 years’ experience in a related position, such as incident response, Security Operations Center (SOC), cloud security, security administration, cloud administration, or system administration
User level proficiency in MS Office 365 products is required
Experience with Asana project management is preferred
Experience with Salesforce Lightening is preferred
Experience with Kusto Query Language (KQL), ability to write custom queries, and experience in the Azure and Microsoft portals such as Defender, Endpoint Manager, and Sentinel is preferred
Preferred Certifications: Sec+, CySA+, M365 and/or Azure Fundamental/Associate Certifications

DTS offers competitive compensation and a strong benefits package including comprehensive medical and dental care, matching 401K, paid time off, flexible spending accounts, disability coverage, and other benefits that help provide financial protection for you and your family.

DTS

New Jobs

Security Operations Center Analyst