Intrusion Analyst - Fairmont, WV

Leidos is looking for a new Intrusion Analyst to join our Security Operations Center (SOC) in Fairmont, WV/Boulder, CO in support of our customer at the National Oceanic and Atmospheric Administration (NOAA). The NOAA SOC comprises of analysts performing 24/7 operations.

Learn more about NOAA here: https://careers.leidos.com/

Primary Responsibilities:

• Perform against established operational rhythm, expectations, and standards for Security Operations Center (SOC) analysts
• Part of the 24x7 operations of the NOAA SOC, supporting shift coverage
• Perform incident handling responsibilities with direct interface to customers and management team
• Perform analysis on anomalous behavior based on log data from firewalls, packet capture, web proxy services, network flow analysis, intrusion detection, and malware analysis tools   
• Operate freely to further investigate and escalate in accordance with protocols and contractual SLAs
• Identify areas of improvement for SOC processes and tools to enhance the mission 
• Provide teaching / mentoring junior levels

Basic Qualifications:

• Bachelor's degree and 2+ years of prior relevant background to operate within the scope contemplated by the level or a Master's with less than 2 years of prior relevant experience; experience in lieu of degree may be acceptable.
• Prior background performing as a SOC analyst
• CEH, GCIH, or relevant IT technology certification is required
• Working knowledge of SIEM solutions and incident management solutions
• Technical understanding of core cybersecurity technologies as well as emerging capabilities.
• Strong systematic and troubleshooting skills
• Excellent written and verbal communication skills
• Team player

Preferred Qualifications:

• Upbeat and positive attitude
• Hands-on cybersecurity exposure.
• Demonstrated comprehension of the life cycle of cybersecurity threats, attacks, attack vector, and methods of exploitation with a grasp of intrusion set tactics, techniques and procedures (TTPs).
• Familiarity or background in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.
• Familiarity with Cloud concepts and background performing monitoring and replying to threats in Cloud environments.
• Familiarity with the NOAA mission.

Clearance:

• Must be a U.S Citizen.
• Must have an active Interim Top Secret or adjudicated Secret acceptable to be considered for this role.

Location:

• Fairmont, WV
• Boulder, CO