Security Operations Analyst

Security Operations Center AnalystLocation: Langley AFB - Hampton, VA Work Type: Onsite Remote Work: NoJob Description As a security operations center (SOC) analyst, you're in the middle of the action, responding to and mitigating threats in real time. You're the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a Tier 2 or 3 SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber attacks for the Air Force. We are seeking an experienced SOC analyst to join our SOC team. In this role, you will be responsible for investigating security incidents, analyzing threats, and coordinating response efforts. You will serve as an escalation point for Tier 1 analysts and play a key role in improving our security posture by enhancing detection, response, and remediation capabilities. You'll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You'll guide efforts to figure out just how many systems are affected and assist recovery efforts. You'll combine threat intelligence, event data, and assessments from recent events, and identify patterns to understand attackers' goals to stop them from succeeding. This is a great opportunity to hone your cyber security skills with hands-on experience in threat assessment and incident response. Qualifications 4+ years of experience in a SOC, incident response, or cyber threat analysis role Experience in analyzing logs, network traffic, digital forensics, malware analysis, threat intelligence, and cyber security Experience with incident response frameworks, such as NIST or MITRE ATT&CK Knowledge of cyber kill chain methodologies Knowledge of SIEM, such as Elastic, QRadar, or Sentinel, EDR, such as CrowdStrike or Microsoft Defender, IDS, and IPS Ability to work under pressure, prioritize, and deliver results Secret clearance Bachelor's degree in Cybersecurity or Information Technology and 5+ years of experience in Cybersecurity, or 12+ years of experience in Cybersecurity in lieu of a degree GCIH, GCIA, CEH, or CISSP Certification Additional Qualifications 1+ year of experience with scripting and automation, including in Python or PowerShell, a plus Possession of strong analytical, problem-solving, and communication skills Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required. Compensation and Benefits Salary Range: $100,000 - $160,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.) Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron's benefits programs. Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.