Security Operations Center Specialist

Responsibilities

• Monitor security events and incident logs from various sources, including network devices, servers, endpoints, and security tools.
• Identify and analyze potential security incidents and anomalies, taking appropriate actions to investigate and elevate as required.
• Participate in incident response activities, including containment, eradication, and recovery procedures.
• Work closely with incident response teams and IT staff to mitigate the impact of security incidents and minimize the risk of recurrence.
• Stay updated with the latest cybersecurity threats and attack vectors.
• Analyze threat intelligence reports to proactively detect and respond to emerging threats.
• Operate and maintain security tools such as SIEM, IDS/IPS, antivirus, and other security‑related solutions.
• Conduct in‑depth analysis of security incidents, perform digital forensics, and document findings for future reference and improvement.
• Prepare and submit detailed incident reports, including root‑cause analysis and recommended remediation actions, to senior management and stakeholders.
• Implement continuous monitoring processes to ensure ongoing visibility into the security posture of the organization.
• Perform regular audits of security controls and configurations.
• Collaborate with the security awareness team to provide input into security training materials and awareness campaigns for employees, enhancing the overall security culture.
• Ensure compliance with established security policies, standards, and procedures.
• Assist in the development and maintenance of security policies as necessary.
• Provide clear and concise shift handover reports to SOC colleagues, ensuring accurate communication of ongoing incidents and pertinent information.

Requirements

• Ability to maintain TS/SCI clearance
• 10+ years’ experience (Bachelor’s degree in relevant field may be substituted for 5 years of relevant experience)
• Proven experience in a Security Operations Center (SOC) or similar role, with hands‑on experience in security monitoring, incident detection, and response.
• In‑depth knowledge of cybersecurity principles, threat landscape, and attack vectors.
• Familiarity with security tools and technologies, such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) systems.
• Understanding of incident response procedures and methodologies, including forensic analysis.
• Strong analytical and problem‑solving skills, with the ability to make quick decisions under pressure.
• Excellent communication skills to collaborate effectively with other team members, management, and external stakeholders.
• Required DoD 8140 compliant certification such as CompTIA Security+
• Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
• Knowledge of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
• Willingness to work in a 24/7 rotational shift environment, including weekends and holidays.

Core Competencies

Demonstrates extensive experience in Security Operations Center (SOC) functions, including security monitoring, incident detection, and response. Proficient in utilizing security tools such as SIEM and IDS/IPS while ensuring compliance with industry standards and regulations.