SOC Analyst

Baltimore, MD, United States

TGS

Job ID 2465084

Tuknik Government Services, a Koniag Government Services company , is seeking a SOC Analyst with a Public Trust Clearance to support TGS and our government customer in Baltimore, MD.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Essential Functions, Responsibilities & Duties may include, but are not limited to:

Work Shift: TBD

Providing 24/7/365 monitoring and analysis of Security event alerts across the enterprise network.

Monitoring agency systems and daily log events to identify potential security threats. Sources include, but not limited to, sensor alert logs, firewall logs, content filtering logs, and Security Event Manager.

Reviewing all incoming alerts, investigating, and ticketing all identified potential security threats using agency incident response-ticketing platform.

Validating traffic and/or network activity (per alerts/logs) as anomalous in accordance with agency. standards and procedures.

Identifying, investigating, and escalating potential security threats to senior agency resources when needed.

Measuring and modeling traffic, while identifying patterns and ports.

Producing reports, both contractual and ad hoc, providing information on events, trends, issues, and activity as requested by the federal customer.

Providing data for inclusion in the agency's CISA Report.

Investigate Open Source Threat Intelligence for the agency.

Identifying the necessity for, and implementation of, the creation of new intrusion detection signatures.

Work Experience, Knowledge, Skills & Abilities: 2-4 years of SOC experience, application-related system administration and/or related field.

Working knowledge of Security Operations systems and the role such systems play in detecting intrusion attempts.

Documented experience creating custom intrusion signatures to detect specific network traffic anomalies. This requires comprehension of, and experience with, most viruses and worms, which may infiltrate and propagate throughout a large network.

Demonstrated experience in populating sensors with newly available signatures when responding to events or management requests.

Knowledge of potential security threat reporting and tracking by means of at least one large-scale ticketing system (CAPRS, ServiceNow or other similar system). Note: the customer will provide training on Agency specific software, processes, and procedures.

Strong computer skills.

Strong oral presentation skills and the ability to articulate English in a clear and concise manner.

Ability to obtain Public Trust clearance.

Education and Certifications: High School Diploma and/or related advanced training and certifications in computer operations or related field. BS/BA degree preferred.

CompTIA A+ plus CompTIA Security+, CompTIA CySA+, or CompTIA Network+.

Note: Documented proof of certifications is required prior to start of employment

The following may also be considered:

Bachelor's or Master's degree in computer science, cybersecurity, or information technology,

Other advanced certifications such as Certified Ethical Hacker (CEH) or Certified Information System Security Professional (CISSP).

Working Environment & Conditions

This job operates in a professional office environment and has a noise level of mostly low to moderate. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

This position is primarily indoors, consistent with a standard office position and has a noise level of mostly low to moderate. The incumbent is required to stand, walk; sit; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; talk and hear. The workload may require the incumbent to sit for extended periods of time. The incumbent must be able to read, do simple math calculations and withstand moderate amounts of stress.

The incumbent must occasionally lift and/or move up to 25 lbs. Specific vision abilities required by the job include close vision, distance vision, color vision, depth perception, and the ability to adjust focus.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, sex, sexual orientation, gender, or gender identity (except where gender is a bona fide occupational qualification), national origin, age, disability, military/veteran status, marital status, genetic information, or any other factor protected by law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require accommodation to navigate or to apply for a position on our website, please contact Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodation.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352