provide various levels of CSOC services (Tier 1, Tier 2, and Tier 3)
24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents
CSOC Tier 1 Services include recording, investigating, and processing events received via walk-ups, phone calls, email, chat, web, cybersecurity tools, and enterprise tools
CSOC Tier 2 Services include malware and implant analysis, and forensic artifact handling and analysis. While not in a period of incident response, conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber incident
CSOC Tier 3 Services include incident handling/incident response, malware and analysis and signature development, and forensic artifact handling and analysis

Requirements

TS/SCI (current); with the ability to successfully pass/maintain a Government Polygraph (post-hire)
BA/BS Degree and typically between Two (2) to Six (6) years of relative work experience
Ability to work One (1) or more of Five (5) work shifts
DoD 8570 IAT Level II required (current); must be able to successfully obtain/maintain CSSP Analyst certification within 120 days of start date
DoD 8570 IAT Level III required (current); must be able to successfully obtain/maintain CSSP Incident Responder certification within 120 days of start date
TCP/IP
Protocol analyzers
Network protocols
Cyber Attack Lifecycle
Mitre Attack framework
Obfuscation techniques (i.e. base64; rot13; XOR; URL encoding; etc.)
Utilizing SIEM for event analysis

Benefits

healthcare
wellness
financial
retirement
family support
continuing education
time off benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

malware analysisforensic artifact handlingincident responsesignature developmentevent analysisobfuscation techniquesTCP/IPnetwork protocolscybersecurity toolsMitre Attack framework

Soft Skills

coordinationexecutioncommunicationproblem-solvingteamwork

Certifications

TS/SCIDoD 8570 IAT Level IICSSP Analyst certificationDoD 8570 IAT Level IIICSSP Incident Responder certification