Leidos
Description
Leidos is seeking a motivated SOC analyst to join our team on a highly visible cyber security single‑award IDIQ vehicle. This Federal Government program is responsible for the prevention, identification, containment, and eradication of cyber threats to IT Enterprise through monitoring, intrusion detection, and protective security services. The SOC analyst will support the overall security of Enterprise‑wide information systems, investigate and report any suspected and confirmed security violations.
The SOC analyst will perform the following:
Coordinate investigation and response efforts throughout the Incident Response lifecycle.
Correlate and analyze events and data to determine the scope of Cyber Incidents.
Acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries and scripts.
Recognize attacker tactics, techniques, and procedures as potential indicators of compromise (IOCs) that can be used to improve monitoring, analysis, and Incident Response.
Develop, document, and maintain Incident Response process, procedures, workflows, and playbooks.
Tune and maintain security tools (EDR, IDS, SIEM, etc.) to reduce false positives and improve SOC detection capabilities.
Document Investigation and Incident Response actions taken in Case Management Systems and prepare formal Incident Reports.
Create metrics and determine Key Performance Indicators to drive maturity of SOC operations.
Develop security content such as scripts, signatures, and alerts.
Basic Qualifications:
Knowledge of each phase of the Incident Response lifecycle.
Understanding of Operating Systems (Windows/Linux) operations and artifacts.
Understanding of Enterprise Network Architectures to include routing/switching, common protocols (DHCP, DNS, HTTP, etc.), and devices (Firewalls, Proxies, Load Balancers, VPN, etc.).
Ability to recognize suspicious activity/events, common attacker TTPs, and perform logical analysis and research to determine root cause and scope of Incidents.
Be familiar with Cyber Kill Chain and have utilized the ATT&CK Framework.
Ability to independently prioritize and complete multiple tasks with little to no supervision.
Flexible and adaptable self‑starter with strong relationship‑building skills.
Strong problem‑solving abilities with an analytic and qualitative eye for reasoning.
Candidates must be able to obtain a CISA EOD.
Pay Range Pay Range $57,850.00 - $104,575.00. The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary.
Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
#J-18808-Ljbffr
Leidos is seeking a motivated SOC analyst to join our team on a highly visible cyber security single‑award IDIQ vehicle. This Federal Government program is responsible for the prevention, identification, containment, and eradication of cyber threats to IT Enterprise through monitoring, intrusion detection, and protective security services. The SOC analyst will support the overall security of Enterprise‑wide information systems, investigate and report any suspected and confirmed security violations.
The SOC analyst will perform the following:
Coordinate investigation and response efforts throughout the Incident Response lifecycle.
Correlate and analyze events and data to determine the scope of Cyber Incidents.
Acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries and scripts.
Recognize attacker tactics, techniques, and procedures as potential indicators of compromise (IOCs) that can be used to improve monitoring, analysis, and Incident Response.
Develop, document, and maintain Incident Response process, procedures, workflows, and playbooks.
Tune and maintain security tools (EDR, IDS, SIEM, etc.) to reduce false positives and improve SOC detection capabilities.
Document Investigation and Incident Response actions taken in Case Management Systems and prepare formal Incident Reports.
Create metrics and determine Key Performance Indicators to drive maturity of SOC operations.
Develop security content such as scripts, signatures, and alerts.
Basic Qualifications:
Knowledge of each phase of the Incident Response lifecycle.
Understanding of Operating Systems (Windows/Linux) operations and artifacts.
Understanding of Enterprise Network Architectures to include routing/switching, common protocols (DHCP, DNS, HTTP, etc.), and devices (Firewalls, Proxies, Load Balancers, VPN, etc.).
Ability to recognize suspicious activity/events, common attacker TTPs, and perform logical analysis and research to determine root cause and scope of Incidents.
Be familiar with Cyber Kill Chain and have utilized the ATT&CK Framework.
Ability to independently prioritize and complete multiple tasks with little to no supervision.
Flexible and adaptable self‑starter with strong relationship‑building skills.
Strong problem‑solving abilities with an analytic and qualitative eye for reasoning.
Candidates must be able to obtain a CISA EOD.
Pay Range Pay Range $57,850.00 - $104,575.00. The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary.
Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
#J-18808-Ljbffr