Note: The job is a remote job and is open to candidates in USA. DecisionPoint Corporation is seeking an IT Security Operations Analyst – Mid to support the GPO Security Operations Center (SOC) by leading incident triage, response coordination, and operational documentation. This role ensures cybersecurity threats are rapidly identified, escalated, and mitigated through standardized response procedures and collaboration with key IT stakeholders.
Responsibilities
- Serve as a front-line incident handler, performing real-time triage of security alerts from Microsoft Defender, Sentinel, Trellix, and other EDR/SIEM tools
- Analyze logs, network traffic, and security events to validate incidents and identify root causes
- Lead initial incident response actions and escalate to senior analysts or SOC leads per established playbooks Assist in the assessment, implementation, and maintenance of security measures for GPO systems in alignment with NIST SP 800-37 and SP 800-53
- Maintain and enhance incident response playbooks, escalation procedures, and detection logic to improve SOC efficiency
- Participate in operational reviews and contribute to incident after-action reports and mitigation recommendations
- Coordinate with ITOPS, ISSM, and engineering teams during threat response activities
- Create and maintain security control test results, asset inventories, and remediation documentation in GRC repositories
- Contribute to RMF artifact generation such as POA&Ms, data flow diagrams, and patch/upgrade schedules
- Ensure all documentation reflects the latest changes to production environments and security tools
Skills
- Minimum Experience: 4 years of experience in a SOC, cybersecurity operations, or security analysis role
- Minimum Education: Bachelor's degree in Computer Science, Information Systems, other related disciplines (or equivalent experience)
- Technical Knowledge: Familiarity with RMF processes and security documentation
- Hands-on experience with SIEM and EDR platforms such as Microsoft Sentinel, Defender, Trellix, or Rapid7
- Clearance Requirement: Must be able to obtain and maintain a Public Trust clearance
- Federal experience
- Certifications: CompTIA Security+, CySA+, Certified SOC Analyst (CSA), ITIL v4 Foundation
Benefits
- Hybrid Telecommute
- Must be able to obtain and maintain a Public Trust clearance
- DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer
- Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
Company Overview