Junior Network Security Operations Center (NSOC) Analyst

TIAG is now hiring a Junior Network Security Operations Center (NSOC) Analyst to join our team in support of the Office of Naval Research (ONR) in Arlington, VA. Candidates must possess an active Secret Clearance or interim Secret Clearance and meet DoD IAWF IAT Level II qualifications to be considered.

This is a 100% onsite position in Arlington, VA.

The Junior NSOC Analyst will support ONR's Network Security Operations Center (NSOC) and work closely with senior NSOC personnel, the Information Assurance (IA)/Cybersecurity/Computer Network Defense (CND) Team, and IT Operations. The Analyst will assist with security monitoring, Security Information and Event Management (SIEM), incident identification and response, vulnerability management, network security operations, and cybersecurity compliance activities.

Responsibilities:

• Monitors security events, alerts, and network activity using SIEM and cybersecurity monitoring tools.

• Assists with analyzing and triaging security alerts to identify potential threats, vulnerabilities, and anomalous activity.

• Supports threat reconnaissance and threat monitoring activities using available cybersecurity tools and information sources.

• Uses security tools and technologies such as Trellix ESM/SIEM, Trellix ePO/HBSS, Splunk, Microsoft Defender for Endpoint (MDE), SolarWinds, and Tenable/ACAS/Nessus.

• Assists senior analysts with investigating SIEM events and executing established Incident Response and Incident Handling procedures.

• Generates, monitors, documents, and tracks cybersecurity incidents through resolution. Escalates significant or suspicious cybersecurity events to senior NSOC analysts and appropriate Government personnel.

• Assists with reviewing Indicators of Compromise (IOCs), threat intelligence, and MITRE ATT&CK information to identify potential threats within the ONR environment.

• Supports the collection, correlation, and analysis of security logs from network devices, endpoints, servers, and enterprise applications.

• Assists the IA team with validating system logging, log retention, and audit trail requirements in accordance with NIST and DoD requirements.

• Supports continual assessment of network device configurations and assists with identifying unauthorized or rogue devices.

• Assists with reviewing and validating implementation of applicable DISA Security Technical Implementation Guide (STIG) requirements.

• Supports vulnerability management activities, including reviewing vulnerability scan results and coordinating remediation with technical teams.