Lead Cyber Security Specialist

Lead Cyber Security Specialist

This is currently a remote position in our SOC, but return to Washington D.C. in a part-time on-site capacity once COVID-19 restrictions are eased. We specifically need someone who can do several weeks of training with our day shift and then take a lead role within a small cyber security team. May include weekend work on a Saturday or Sunday for emergent incident responses only.

7-10 Years Experience in Cyber Operations, Engineering, and Incident Response

• At least 6 years of experience as a security operations center (SOC) analyst
• Successful candidate must be a motivated self-starter with a highly inquisitive and analytic mindset.
• Relevant cybersecurity subject matter expertise - especially in information security, network security, security event triage, intrusion analysis, malware, computer networking TCP/IP, and anomalous behavior.
• Experience and skills in: continuous monitoring, information security alerting, security event triage, intrusion analysis, threat trends, malware, and anomalous behavior.
• Demonstrated experience with security information and event management (SIEM - Qradar is a Plus), security orchestration and automated response (SOAR - Demistory/PaloAlto XOAR is a plus), and other security technologies.
• Experience in, or willingness to quickly learn, at least one security tool type such as IDS(PaloAlto Threat Threat Protection/Wildfire is a plus/IPS (Cisco Source Fire is a plus), network access control (Forescount is a plus), firewall (PaloAlto PAN is a plus), anti-malware (CarbonBlack EDR and CrowdStrike Falcon is a plus), etc
• Experience with the Microsoft Cloud Security Apps, Office 365 EPO (Sentinel is a Plus).
• Attention to detail and excellent analytical and problem-solving skills.
• Advanced written and verbal communication skills.
• Excellent organizational skills and ability to set priorities and handle mu