Senior SOC Analyst (CITIZENS ONLY)

THIS POSITION IS ONLY FOR U.S. CITIZENS with SOC EXPERIENCE

JOB DESCRIPTION:

**This position is currently remote until our Prime determines it is safe to report to work onsite due to ongoing Covid-19 situation. This position has always been an ONSITE position.**

The Security Engineer/Senior Level Analyst is considered a Senior Level Analyst support second tier escalation. The Senior Level Analyst must have the ability to support detailed discovery and analysis of intrusion detection security events that traverses the Judiciary Network, and assures that quality work is performed. The Senior Level Analyst acts as the second tier escalation supporting Information Assurance Engineers and the Shift Team Lead.

The Senior Level Analyst will ensure that all incidents are correct in review, and the Senior Level Analyst will construct all email notification messaging. Responsibilities include aggressively monitoring and responding to alerts triggered in the SEIM tool or requests for assistance from customers. The Senior will use a variety of tools to investigate incidents and take immediate action or recommend a course of action to safeguard the U.S. Courts systems. The Senior will document all incidents and create a clear narrative that supports their conclusions.

General Experience: Six (6) years of security intrusion detection examination experience involving a range of security technologies that product logging data; to include wide area networks host and Network IPS/IDS/HIPs traffic event review, server web log analysis, raw data logs; the ability to communicate clearly both orally and in writing.

Specialized Experience:

Prospective candidate will have at least three (3) years of experience working at a senior level, performing analytics examination of logs and console events in the following working experience areas of; creating advance queries methods in Splunk or advance Grep skills, firewall ACL review, examining Snort based IDS events, Pcaps, web server log review, and working in a SIEM environment.

Years of Experience: 7-8

Education Requirement: Bachelor’s degree, preferred but NOT required

Clearance requirement: U.S. Citizenship is required.

Standard Benefits:

Our standard benefits include: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. Dependents coverage for health and dental insurances is available as an out of pocket expense for employees. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees or w-2 employees with no benefits will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all w-2 employees are eligible to be part of company's profit sharing, no employee contributions required. we do 'not' pay for parking and commute and relocation expenses.

Job Types: Full-time, Contract

Pay: $87,313.00 - $140,519.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible schedule
• Health insurance
• Life insurance
• Paid time off
• Tuition reimbursement
• Vision insurance

Schedule:

• 8 hour shift
• Monday to Friday

COVID-19 considerations:
Remote right now

Education:

• Bachelor's (Preferred)

Experience:

• Security Intrusion detection: 7 years (Preferred)
• Splunk: 5 years (Preferred)
• SIEM: 5 years (Preferred)
• SOC: 6 years (Preferred)

License/Certification:

• CEH (Preferred)

Work Location:

• Multiple locations