3+ years of experience with incident handling, forensics, sensor alert tracking, or Cybersecurity case management
1+ years of experience in a SOC
Experience with Cybersecurity tools, including ArcSight, ACAS, or equivalent
SIEM tools
Experience with Cybersecurity forensics tools and methodologies
Experience with network ports and protocols
Experience with log review and analysis
HS diploma or GED
DoD 8570 Baseline Certifications for CSSP Analyst
Ability to work a 12am-12pm or 12pm-12am shift, including some weekends
Knowledge of industry, government and DoD best practices, including awareness
of new or revised security solutions, improved security processes, and the
development of new attacks and threat vectors
Knowledge of DoD system solutions to mitigate risk in any activity that
potentially impacts the security of existing IT and information management
Ability to provide monitoring and risk analysis of zero-day and other
vulnerabilities
Ability to correlate disparate datasets to identify abnormal behavior
Ability to triage SIEM events and determine escalation of indicators
Ability to apply NIST, federal, and DoD guidelines, policies, directives, and
memos as they relate to Cyber Security
CCNA or Network+ Certification
Computing Environment Certification, including McAfee, Blue Coat, RedHat, or
Cisco
Top secret clearance
