GDIT is seeking a full-time Security Operations Center (SOC) Analyst with an active SECRET clearance to work onsite at our clients location at the Centers for Disease Control and Prevention (CDC) Cyber Security Operations Center (CSOC) in Atlanta, GA.
The CSOC is responsible for identifying and responding to computer network security incidents, investigating and correlating Indicators of compromise associated with attacks against computers and computer networks, assessing and communicating the severity of security incidents, using network and network security tools.
In this role, you will work within a team of 11 to provide support to a 24x7x365 SOC, including Federal Holidays
You will work an alternating schedule of 56 hours one week and 24 hours the next (either 6 am – 6 pm and 6 pm - 6 am working 12 hour shifts and one 8 hour shift; includes approximately two weekends a month)
Your days of the week worked will vary but hours are the same each week
Schedule flexibility occurs within the team including rotating holiday coverage
Conduct Incident Response activities in accordance with the CDC Enterprise-wide Computer Security Incident Response (IR) Plan, CDC Incident Response Guide and related policies and procedures
Monitor their organization’s networks for security breaches and investigate a violation when one occurs
Recommend and/or implement mitigation actions in response.
Prepare tickets that document security breaches and the extent of the damage caused by the breaches
Research the latest information technology (IT) security trends
Recommend security enhancements to management or senior IT staff
Required Skills and Experience:
Bachelors and 5+ years experience working in a operations center environment (BS degree can be substituted with 4 additional years of experience)
Knowledge and skills in one or more of, but not limited to, the following tools: NetWitness, Splunk, Wireshark, FireEye
Active SECRET clearance is a must
Commuting distance to Atlanta, GA
Desired Skills and Experience:
One or more of the following certifications: SEC+ - SSCP - CEH - DHFI
Any SANS certification - CISSP - CISA - CISM
We are GDIT. The people supporting some of the most complex government, defense, and intelligence projects across the country. We deliver. Bringing the expertise needed to understand and advance critical missions. We transform. Shifting the ways clients invest in, integrate, and innovate technology solutions. We ensure today is safe and tomorrow is smarter. We are there. On the ground, beside our clients, in the lab, and everywhere in between. Offering the technology transformations, strategy, and mission services needed to get the job done.
GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.