![Indigo IT](https://media.trabajo.org/img/noimg.jpg)
Sr SOC Analyst
1 month ago
Senior SOC Analyst Washington, DC (Hybrid onsite and telework) SUMMARY: Founded in 2001, Indigo IT is an award winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers’ technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. As a Veteran-Friendly employer, we are proudly partnered with the Virginia Values Veterans (V3) Program, and a recipient of the HIRE Vets Gold Medallion Award, which recognizes our commitment to recruiting our nation’s Veterans. Recognized on the Inc. 5000 list of America’s fastest growing companies in 2020 & 2021 and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today This position will support an IT Security Program across a geographically dispersed infrastructure and user population. This support will include technical administration, deployment, and management of intrusion prevention system (IPS), security information and event management (SIEM) system, vulnerability management, and incident activities. Additionally, this position will support the modification to existing infrastructure protection deployments to respond to changes in infrastructure and shall support the deployment of additional hardware and/or software at remote office locations. This support may include the utilization of VMWare to support rapid deployment at remote locations and high availability of infrastructure protection products. Monitor Realtime Network Activity for Potentially Suspicious Activity Monitor the health of the Infrastructure Protection Tools and ensure that all tools are operating with up-to-date patches, signature files, log sources, etc., and maintain 24/7 visibility into the network to monitor for security events. Investigate Network Anomalies Investigate network anomalies and system events as part of an incident response team and author and implement custom detection content and/or SIEM rules for perimeter and endpoint security solutions. Assess the Current Capabilities of the Security Operations Center Assess the current capabilities of the SOC and identify deficiencies or areas for improvement based on industry and government best practices (such as the MITRE ATT&CK framework) that may address recommendations in strategy, hardware, software, resource support, etc. Remain up to date with current threats utilizing open-source intelligence. ESSENTIAL FUNCTIONS/RESPONSIBILITIES: Provide cyber-operations monitoring and operational support for services during normal business hours. Act as internal expert on, and support investigations into, matters relating to intrusion detection and incident response. Research and advise on the development of security monitoring and incident responses processes and solutions with a focus on continuous improvement. Provide cyber-operations support at the expert experience level for the following types of activities: Provide monitoring and analysis support for enterprise IDS/IPS and SIEM solutions including event analysis, log analysis, and event correlation to identify IT security events. Provide reporting and overall support to ensure the security events are being reviewed and actioned in a timely manner. Provide support for enterprise anti-virus & anti-malware protection including server operation, policy creation, virus investigation and remediation, and reporting. Provide support for enterprise vulnerability management including, server operation, policy creation, vulnerability and compliance scanning, vulnerability investigation and remediation, and reporting. Provide support for enterprise patch management including client installation, server configuration and operation, policy creation, failed client investigation and remediation, patch deployment, and reporting. Provide support for operating system image creation including initial image preparation, periodic updates to maintain the image with security patches and application updates, new/prototype hardware images, and imaging server configuration and operation. Design, develop, engineer, and implement computer security solutions. Define and design processes and procedures supporting the implementation of computer security solutions. Provide support for creation and maintenance of documentation to include, but not limited to, hardware and software configurations, operation and maintenance documents, and Visio diagrams. EDUCATION, EXPERIENCE, & CERTIFICATIONS: Bachelor’s Degree in computer science, information systems, business, engineering, or related technical field. Technical training in these fields may be substituted for a degree. Minimum 10 years of experience in performing IT security support services or in a related field of study. An Associates Degree with 12 years of experience in performing IT security support services or in a related field of study may substitute for above. US Citizenship and ability to obtain and maintain a Public Trust clearance is required. SPECIFIC KNOWLEDGE, SKILLS, & ABILITIES: Experience with cybersecurity systems, tools, platforms, or applications, including Splunk, Cisco Firepower, Palo Alto Cortex XDR, IDX Identity Protection Services. Experience with Splunk is required. Support the administration, operation, and management of an intrusion prevention system (IPS), unified threat manager (UTM), and other systems as needed, to include: The modification of policy. The deployment and maintenance of remote sensors. The tuning of rules, alerts, parsers, and custom scripts. Monitoring the integrity, availability, and health status of the system. Monitoring and assessment of alerts and determination of appropriate responses required to mitigate risk and provide threat and damage assessment if needed. Support the operation and management of a security information and event management (SIEM) systems, to include: Monitoring, reviewing, and analyzing system event and network flow logs in correlation with other security tools to identify potential security incidents. The configuration of event logs from multiple sources and network flow data. The development and/or modification of event reports to identify suspicious behavior or potential violations of agency policy. Support the operation and management of a vulnerability scanner to include: Conducting vulnerability assessments and configuration compliance scans of workstations, servers, and network infrastructure, Performing web application and database vulnerability scanning, if needed, Performing source code analysis, if needed, Performing penetration testing to validate identified vulnerabilities, if needed. Analyzing vulnerabilities, developing mitigation strategies, and working with operational stakeholders to remediate identified vulnerabilities, Support incident response activities to include: Validating threats detected by perimeter devices, SIEM system, and forensic tools. Assessing source and impact of threat. Prioritizing responses; and fully understanding the risk of each threat and remediate, if needed. Develop Regex (Regular Expressions) scripts as needed to develop custom rules and queries. Develop and document standard operating procedures (SOP) as needed. Demonstrated experience serving in a lead role performing tasks that may include, but not be limited to: Incident Response, Endpoint Detection and Response, Network Monitoring, Intrusion Detection/Prevention, and SIEM use and administration. Demonstrated experience leading efforts to respond to and analyze incidents, identifying their root cause and potential impact. Demonstrated ability to think critically and creatively to develop innovative solutions to software problems. Strong analytical skills with the ability to analyze data sets to determine trends, establish strategies, and make decisions. Outstanding interpersonal and communication skills with the ability to effectively communicate across diverse audiences and influence cross functionally. Ability to multi-task as well as be strategic, creative, and innovative in a dynamic, fast paced matrix team environment. At Indigo IT, we offer an expansive benefits package for our employees, which includes: Medical, Dental, and Vision coverage options. In addition, we offer 401(k) with company match, Group life and disability, Flex Spending Accounts (FSA), Paid Time Off (PTO), Paid holidays, and Education assistance. We also have in house training programs for employees, we reward thought leadership with bonuses and recognition for publishing, speaking, and innovative thought leadership in our industry. Indigo IT is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. This employer uses E-Verify.
-
Sr SOC Engineer
1 month ago
Washington, United States Pennant Solutions Group Full timeJob DescriptionJob DescriptionSenior SOC EngineerLocation: Washington, DCClearance: Top SecretResponsibilities include responding to and resolving cybersecurity incidents, as well as proactively preventing their recurrence. Utilize cutting-edge principles, theories, and concepts to contribute to the development of new strategies. Tackle complex problems and...
-
Sr SOC Engineer
1 month ago
Washington, United States Pennant Solutions Group Full timeJob DescriptionJob DescriptionSenior SOC EngineerLocation: Washington, DCClearance: Top SecretResponsibilities include responding to and resolving cybersecurity incidents, as well as proactively preventing their recurrence. Utilize cutting-edge principles, theories, and concepts to contribute to the development of new strategies. Tackle complex problems and...
-
SOC Manager
2 months ago
Washington, United States Electrosoft Full timeElectrosoft Services, Inc. is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, enterprise IT modernization, and software solutions. We always seek to delight our customers, so we retain highly qualified employees and offer them...
-
SOC Manager
2 months ago
Washington, United States Electrosoft Full timeElectrosoft Services, Inc. is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, enterprise IT modernization, and software solutions. We always seek to delight our customers, so we retain highly qualified employees and offer them...
-
Consultant Manager SOC
3 months ago
Washington, United States Trusted Advisors Full timeJob DescriptionJob DescriptionNous sommes à la recherche pour le compte d'une filiale d'une banque internationale, un Consultant Manager SOC, afin de piloter les activités opérationnelles du SOC, gérer l’équipe des ingénieurs SOC (Admin, et analystes SOC) et assurer l’évolution de SOC, selon les besoins clients et l’état de l’art.NB:...
-
SOC Analyst
3 months ago
Washington, United States Serigor Inc. Full timeJob DescriptionJob DescriptionJob Title: SOC Analyst - Tier 1 (Onsite)Location: Washington, DCDuration: 12 Months+Job Description:The client is the central technology organization of the client Government. It sets the standard for a number of information technology functions including the security policies and procedures for the District's IT footprint....
-
SOC Lead/Project Manager
16 hours ago
Washington, Washington, D.C., United States Fusion Technology Full timeJob Summary:Fusion Technology is seeking a highly skilled SOC Lead/Project Manager to support a Government Agency in providing project management services and managed security services in support of the development, implementation, and operation of the Agency's IT security program and service unit security needs.Key Responsibilities:Ensure that contractor...
-
SOC LEAD/Project Manager
3 days ago
Washington, United States Fusion Technology Full timeSOC Lead/PM Who are you? You have the ability to obtain and maintain a government issued public trust clearance. You have the relevant experience and training to lead and manage a SOC environment and individual contributors. What you will do: The Virtual Security Operations Center (VSOC) Lead will support a Government Agency and provide...
-
SOC Analyst/Security Engineer
3 months ago
Washington, United States RAMPS International Inc. Full timeJob DescriptionJob DescriptionRole: SOC Analyst/Security EngineerDuration: Long termLocation: Washington, D.C. ESSENTIAL DUTIESThe position's essential duties include the following:• +/- 5-year experience as a qualified security analyst• Defines and implements security configurations for threat detection/prevention tools• Integrates threat,...
-
SOC Analyst
2 months ago
Washington, United States ShorePoint Full timeJob DescriptionJob DescriptionSalary: Who we are:ShorePoint is a fast-growing, industry recognized, and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality...
-
Front-End Days
2 weeks ago
Washington, United States Experis Full timeOne of our premier clients in the DC market is seeking a SOC Analyst to join their growing team. This role is 100% ONSITE & candidate must have or be eligible for a security clearance. Job specs: o Active participant in 24x7 operations specific to Days shifts. This includes proactively monitoring and providing near-real-time cyber security status and...
-
Financial Analyst Sr
3 weeks ago
Washington, United States Elevance Health Full timeFinancial Analyst Sr Location: This position will work a hybrid model (remote and office). The ideal candidate will live within 50 miles of one of our Indianapolis, IN or Seattle, WA Elevance Health PulsePoint locations. The Financial Analyst Sr will be responsible for preparing financial and business-related analyses and researching in such areas as...
-
Sr. Public Affairs Analyst
4 weeks ago
Washington, United States Atollo Full timeJob DescriptionJob DescriptionExciting opportunity for a Full-Time Senior Public Affairs Analyst at ATOLLO in Washington, DC. Join a dynamic team that values experience and knowledge and is passionate about problem-solving and excellence. Be part of a customer-focused culture that encourages forward-thinking and professionalism.Are you ready to showcase your...
-
Sr. Analyst(s)
1 month ago
Washington, Washington, D.C., United States MPOWER Financing, Public Benefit Corporation Full timeMPOWER Financing, Public Benefit Corporation in Washington, DC is seek'g Sr. Analyst(s) (Marketing Analytics) to research conditions in local, regional, national, & online markets. No trvl req'd. WFH benefit avail.Salary:$91,416/yrEmail resumes to:careers@
-
SOC LEAD/Project Manager
1 day ago
Washington, United States Fusion Technology LLC Full timeJob DescriptionJob DescriptionSOC Lead/PMWho is Fusion Technology? Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by...
-
Cybersecurity Threat Analyst
1 week ago
Washington, United States MindPoint Group Full timePosition: Cybersecurity Threat Analyst - Clearance Required - RemoteDepartment: DOJ JSOC-HUDOverview: MindPoint Group, LLC is seeking a skilled Cybersecurity Threat Analyst to join our esteemed Cyber Threat Hunt team. This role is pivotal in enhancing our client's operational capabilities, and you will collaborate with a dedicated and knowledgeable team...
-
Cybersecurity Operations Analyst
1 week ago
Washington, Washington, D.C., United States ShorePoint Full timeJob OverviewPosition Title: SOC Analyst (Night Shift) - Top Secret ClearanceCompany Overview:ShorePoint is a rapidly expanding, award-winning firm specializing in cybersecurity services, dedicated to serving high-profile clients in both the private and public sectors. Our mission is to provide unparalleled security solutions to safeguard sensitive...
-
Sr. Data Analyst
1 month ago
Washington, United States The National Park Foundation Full timeJob DescriptionJob DescriptionThe National Park Foundation (NPF) is seeking a motivated, highly skilled Sr. Data Analyst to join the IT team. This key support role is instrumental to the success of NPF’s IT priorities.The Sr. Data Analyst will work closely with the Vice President, IT and different departments to plan, coordinate, and implement effective...
-
Sr. Data Analyst
3 weeks ago
Washington, United States The National Park Foundation Full timeJob DescriptionJob DescriptionThe National Park Foundation (NPF) is seeking a motivated, highly skilled Sr. Data Analyst to join the IT team. This key support role is instrumental to the success of NPF’s IT priorities.The Sr. Data Analyst will work closely with the Vice President, IT and different departments to plan, coordinate, and implement effective...
-
Sr Curam Analyst
3 weeks ago
Washington, United States AHU Technologies Inc Full timeTITLE: Sr Curam Analyst LOCATION: Washington, DC/ Remote MINIMUM EDUCATION: Bachelor’s degree in IT, related field, or equivalent experience. REQUIRED EXPERIENCE: 16 years INTERVIEWS: Webcam Only Job Description: The client is looking for a Curam Business Analyst, responsible for working closely with the client's technical workstreams and functional...