Note: The job is a remote job and is open to candidates in USA. SAIC is a mission integrator that provides secure technology and professional services across defense, intelligence, space, and civilian markets. The SOC 1 Analyst will provide 24x7 monitoring and analysis of SIEM events, investigate and manage security incidents, coordinate issue resolution, support reporting and investigations, and escalate complex incidents as required. This role is fully remote within the United States and requires rotating shifts.
Responsibilities
- Triage events and perform follow-up investigation(s) to identify security incidents
- Log security incidents using an Information Technology (IT) ticketing system
- Manage security incidents throughout their lifecycle
- Coordinate with other technical teams to investigate, document, and resolve issues
- Make recommendations to members of the leadership team in order to improve the SIEM through tuning and updates
- Utilize threat intelligence sources and analyze events to identify threats and risks
- Provide support for routine reporting
- Support ad-hoc data and investigation requests
- Conduct security scans as directed using established processes
- Monitor and maintain communications for the SOC using contract specific communication methods
- Escalate complex incidents to the SOC Lead or Tier 2 Analyst per contract requirements
- Maintain documented SOC Service Line Agreements (SLA) for security alert monitoring
- Additional duties as assigned
- Assist with Security Incident Response Team (SIRT) calls when required by Tier 2 and Tier 3 staff
Skills
- Associates Degree and 6 years of experience. Bachelors Degree and 4 years of experience
- Security+ certification is required
- Candidates must be U.S. Citizens
- Ability to obtain a Public Trust
- Ability to work a rotating shift every 5 months
- Experience providing 24x7 monitoring and analysis of SIEM
- Familiarity with ITSM platforms such as ServiceNow
- Strong documentation and auditing skills with attention to detail
- Networking knowledge equivalent to Net+ or CCNA is a plus
- Experience with SIEM software and GenAI prompting preferred
- Acquaintance with, and understanding of, practical application of HIPAA, FERPA, PIA, CJIS, NIST 800-53, ISO 27001, and others, as they may apply to the security and protection of customer, constituent and corporate data
Benefits
- This role can be worked 100% remotely within the United States.
Company Overview