SOC Analyst at Punch Cyber
Job details
Use AI to assess how you fit
About this role
About Us:
PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team.
PUNCH is king for a Cyber Security Analyst (Remote Position) to work with our team supporting a Federal civilian agency’s Security Operations Center (SOC). As a Cyber Security Analyst, you will be given the opportunity to learn from an experienced team of security professionals about both traditional and unconventional ways to detect, analyze, and mitigate potential intrusions and other security incidents.
Minimum Requirements:
·
1-3 years’ work experience in Network Security
Background (formal or informal) in hands on computer and
networking experience to include a good understanding of TCP/IP, routing, and major Internet protocols
Strong desire and ability to learn and experiment with new technologies
Must be able to work independently as well as in a team environment
US Citizen
Preferred qualifications:
BS in a technical field, Computer Science, Mathematics, or
Statistics
Incident response (IR) experience
Experience with Splunk ES (SIEM Platform)
Experience with Cyber Security Tools log such as Network and Web Application firewalls, vulnerability management, and proxy servers
Experience analyzing EDR logs (MS Defender)
Experience analyzing Windows event and Sysmon Logs
Experience analyzing VPN Logs (GlobalProtect)
Experience with ticketing solutions such as ServiceNow
Experience with Jira/Confluence
Strong verbal and written communication skills
Have current Cybersecurity Certifications such as Security +, CySA+, CEH
·
Candidates must be willing to work in a SOC environment, demonstrate strong problem solving skills, allow for flexible scheduling, and be able to clear a Federal Civilian Agency’s clearance process. Weekend and holiday work will be required. Shift is a 4 days/10 Hour weekly schedule allowing for 3 days off per week. Proposed Schedule: (with limited flexibility)
First Shift:
-Sunday – Wednesday, 06:00am - 4pm Or
-Wednesday – Saturday, 06:00am – 4pm. Second Shift: -Sunday – Wednesday, 2:00pm-00:00 (Midnight) Or -Wednesday – Saturday, 2:00pm – 00:00 (Midnight) Third Shift: -Sunday – Wednesday, 10:00pm-8:00am Or
-Wednesday – Saturday, 10:00pm-8:00am.
Originally posted on Himalayas