Tier 1 SOC Analyst at Leidos in Remote

Summary: Leidos is seeking a motivated Security Operations Center (SOC) Tier 1 analyst to join their SOC Team. The role involves monitoring and analyzing security events to identify potential threats and respond to incidents promptly. Responsibilities: - Incident Management: Monitor network traffic for unusual activity and respond to threats or escalate to Tier 2 - Threat Tracking: Maintain awareness of ongoing cyber threats over time - Threat Detection: Constantly monitor systems and networks for signs of intrusion, malware, or other security risks - Reporting: Document incidents, threats, and false positives in detail - Vulnerability Management: Update and maintain documentation on current vulnerabilities, and escalate to primary shareholders for critical vulnerabilities - Communication: Relay information about current threats and incidents to team members and stakeholders - Collaboration: Continuously share knowledge and contribute to improvement of SOC tools and processes - Continuous Learning: Stay updated with the latest cybersecurity threats and defense strategies through continuous learning and training Required Qualifications: - BS in Information Security, Computer Science, or related field - Ability to obtain public trust clearance - 1-2 years of experience in cybersecurity - Candidates must be adept at detailed reporting of incidents, threats, and false positives - Candidates must show a commitment to continuous learning and staying updated with cybersecurity trends - Understanding of SIEM alerting and analytic processes - Capable of solving technical problems following established procedures and policies Preferred Qualifications: - Value candidates who have led cybersecurity awareness trainings - Seek candidates who stay informed on latest cybersecurity developments - Looking for experience in developing or customizing security tools - Candidates who have experience in monitoring the following security logs: Endpoint, Network, and Cloud - Understanding of CKC, MITRE ATT&CK, or other Cyber Security frameworks Required Skills: Cybersecurity, SIEM Alerting, Security Incident Management, Threat Detection, Vulnerability Management, Security Frameworks - CKC, Security Frameworks - MITRE ATT&CK, Security Log Monitoring - Endpoint, Security Log Monitoring - Network, Security Log Monitoring - Cloud, Detailed Reporting, Commitment to Continuous Learning