Security Operations Analyst

About This Role

Working on unusually complex problems and providing highly innovative solutions, the Security Operations Analyst responds to and resolves cybersecurity incidents, proactively preventing their reoccurrence. This role applies leading-edge principles, theories, and concepts, contributing to the development of new principles and concepts. The analyst operates with substantial latitude for unreviewed action or decision and may mentor or supervise employees and technical competencies.

Responsibilities

• Respond to and resolve cybersecurity incidents
• Proactively prevent the reoccurrence of cybersecurity incidents
• Apply leading-edge principles, theories, and concepts
• Contribute to the development of new principles and concepts
• Work on unusually complex problems and provide highly innovative solutions
• Operate with substantial latitude for unreviewed action or decision
• Mentor or supervise employees and technical competencies

Requirements

• Experience with intelligence-driven defense, Cyber Kill Chain methodology, or MITRE ATT&CK framework
• Knowledge of industry-accepted standards for incident response actions and best practices for SOC operations
• Knowledge of security operation tools, including SIMs or DCAP analysis
• Knowledge of intrusion set tactics, techniques, and procedures
• Top Secret clearance
• Bachelor’s degree and 1+ years of experience supporting information technology or intelligence operations, or 7+ years of experience supporting information technology or intelligence operations in lieu of a degree

Nice to have:

• Experience supporting a computer incident response team, cyber network operations, or Security Operations Center (SOC) operations for a large and complex enterprise
• Experience with Microsoft Sentinel and Splunk
• TS/SCI clearance with a polygraph
• Master’s degree
• GIAC Continuous Monitoring (GMON), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), GIAC Network Forensic Analyst (GNFA), GIAC Cloud Threat Detection (GCTD), and GIAC Cloud Forensics Responder (GCFR) Certifications

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program for exceptional performance and superior demonstration of values

Important Details

• Work model: Remote (may be required to work in person at a Booz Allen or customer facility); Hybrid (expected to work from a Booz Allen or customer facility in alignment with leadership's expectations and role needs); Onsite (work primarily performed full-time at a customer facility, collaborating directly with colleagues and customers as required by the role)