Note: The job is a remote job and is open to candidates in USA. Nightwing provides full-spectrum cyber, data operations, systems integration, and intelligence mission support services for government and commercial customers. The Tier 1 CSOC Analyst monitors and triages security alerts, gathers incident information, escalates events for further investigation, and supports the use of AI/ML and automation to improve security operations.
Responsibilities
- Identification of Cybersecurity problems which may require mitigating controls
- Interpret output from the SIEM, CSOC mailboxes, and phone calls to identify potential security incidents
- Collect basic information to support analysis such as IP address, location, affected asset(s), etc
- Escalate items which require further investigation to other members of the Threat Management team
- Execute operational processes in support of response efforts to identify security incidents
- Utilize AI/ML-based tools and techniques to detect anomalies, automate incident triage, and improve threat intelligence
- Performing and analyzing threat intelligence to assess risk and adapt defenses using ML enhance tools
- Stay current on the latest cybersecurity trends, threat actors, and AI/ML research relevant to the field
- Identify and support automation use cases, including the use of AI/ML to enhance SOC capabilities
- Collaborate across Operations to provide SOC enhancement capabilities with automation and AI
Skills
- Must be eligible to obtain a sensitive clearance – Position of Public Trust – and may be required to obtain a higher security clearance
- Must have 1+ years' experience in IT Operations
- Must have 1+ year experience in IT Security
- Working knowledge of:
- Platform Security Basics
- Threat Lifecycle Management
- TCP / IP
- Incident Management
- Knowledge of Control Frameworks and Risk Management techniques
- Excellent oral and written communication skills
- Excellent interpersonal and organizational skills
- Strong understanding of IDS/IPS technologies, trends, vendors, processes and methodologies
- Understanding of ethical AI principles and their implications in cybersecurity
- Familiarity with cloud security (AWS, Azure, GCP)
- Understanding and experience identifying and implementing automation use cases
- Splunk experience, developing queries, data models, and dashboards
- Bachelor of Science Degree with a major in Computer Science/Computer Engineering, Engineering, Science or a related field. Two years of related work experience may be substituted for each year of degree-level education
- The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
- Familiarity with the application of AI/ML techniques in cybersecurity, including but not limited to automated threat detection, incident response automation, and predictive analytics. Experience in evaluating the effectiveness of AI/ML solutions in a SOC environment is a plus
- Cloud monitoring experience is a plus
- One or more relevant certifications such as CEH, CISSP, CompTIA Security+, or GCIH are advantageous
Benefits
- Medical insurance coverage
- Vision insurance coverage
- Dental insurance coverage
- 401k plan
- PTO
- Holidays
- Additional insurances
- Hybrid work arrangement
Company Overview