Cyber Security Operations Center Engineer

Company: ASRC Federal
Location: Arlington
Posted on: February 20, 2021

Job Description:

Job TitleSecurity Operations Center EngineerJob DescriptionASRC Federal Data Networx is seeking candidates to provide IT security support to a government contract in Washington, DC.Position: Security Operations Center EngineerLocation: Washington, DCClearance: Must be a ; Active Public Trust, desired.Summary: Leads Security Operations Monitoring and Incident Response team to proactively monitor network/bandwidth traffic and/or performance and audit logs which prevents network attacks and/or reactively identify network intrusions and/or anomalous security incidents across the enterprise.Responsibility:

• Perform malware and malicious file analysis.
• Provide initial analysis, documentation artifacts and escalate incidents to Incident Responders for detailed analysis remediation recommendations.
• May conduct Cyber Hunt Teams.
• Perform advanced analysis of warning intelligence data.
• May individually perform these tasks as well as provide supplemental information and analysis for complex issues as required by Incident Responders to implement remediation actions which re-establish the security posture of a technology or enterprise.
• Lead advanced rule generation and/or trend analysis and correlation initiatives across the enterprise. Maintain all tool sets within SecOps.
• Support the creation of operational policies and identify documentation and/or technology Process Improvements and support implementations.
• Engages customer technical POCs as necessary throughout SOC operations.
• Provide guidance and oversight of multiple individual SOC Analysts.Location810 7th Street NW DC-DC058RequirementsExperience/Education:
  • Bachelor's degree in a technical field
  • A minimum of 8 years work experience performing IT Security Operations.
  • Prior MetaFlows and Fireye AX adminstrator experiences, highly desired.
  • McAfee ePolicy Orchestrator Certification, Splunk Enterprise Certified Architect/Admin, RSA NetWitness Logs & Network Certified Administrator, GIAC Certified Incident Handler (GCIH) or EC-Council's Certified Incident Handler (E-CIH), highly desired.ASRC Federal and its Subsidiaries are Equal Opportunity / Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law. - provided by Dice

Keywords: ASRC Federal, Arlington , Cyber Security Operations Center Engineer, Engineering , Arlington, Virginia