Technology Shared Services (TSS) is looking for a Tier I Security Operations Center (SOC) Analyst. As a member of the 24x7x365 TSS SOC team, the Tier I Security Operations Center (SOC) Analyst. will be responsible for performing initial triage and escalation of security alerts from hardware, software, intelligence sources, virtual systems, and virtual applications. As a SOC Analyst, the aptitude and flexibility to quickly learn and utilize third party toolsets will be an essential part of securing our client environments. This role will be in Bossier City, LA.

RESPONSIBILITIES:

As a Tier I Security Operations Center Analyst you will:

• Provide technical support on event network security logs and trend analysis.
• Detect the full spectrum of known cyberattacks (e.g., DDoS, malware, phishing, others).
• Uncover and pinpoint security violations of compromised systems and devices
• Correlate security events from various capabilities to identify attacks and breaches.
• Analyze and act on intelligence information to secure customer networks and devices
• Observe, document and report actions taken by malicious actors in customer networks.
• Maintain a current understanding of the best practices and strategies used in cyber security.
• Motivate self and co-workers to expand knowledgebase and capabilities.

REQUIRED QUALIFICATIONS:

You MUST have:

• Technical Training, Certification(s) or Degree, 0+ years of experience or equivalent years of experience
• Ability to obtain and maintain an Interim or Active DoD Secret clearance
• US Citizenship is required due to clearance requirement
• Active CySA+ certification
• Ability to obtain and maintain Splunk Core Certified User and Splunk Core Certified Power User certification within 6 months' of hire.

PREFERRED QUALIFICATIONS

Even BETTER if you have:

• Certification(s) and/or experience with any SIEM or log aggregation system
• Strong analytical, organizational and project management skills
• Understanding of networking fundamentals, the OSI model, and TCP/IP protocols
• Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.)
• Experience reviewing network, host, and application audit logs (system, security, etc.)
• Familiarity of security standards (NIST, FISMA, Fed RAMP, DCID, CNSS and DoD 8500)
• Knowledge of cloud IT solutions and security considerations of cloud solution deployment
• Other Relevant Cybersecurity certifications

WHAT GDIT CAN OFFER YOU:

• 401K with company match
• Customizable health benefits packages
• Internal mobility team dedicated to helping you own your career
• Challenging work that makes a real impact on the world around you
• Not sure this job’s the one for you? Check out our other openings at gdit.com/careers.