SOC Corelight/Verodin SME

SOC Corelight/Verodin SME

Duration: 6 months Location: San Antonio, TX or Remote with occasional travel to San Antonio, TX Work Status: US Citizen Clearance: Active Secret clearance

Job Role/Responsibilities:

• Proficient in highly demanded emergent cyber tools or processes required under special circumstances.
• Experienced with SOC detections, operations, and responses; Threat Management; Exposed to API integration; Programming experience with APIs (python, Java script); Basic understanding of security tooling and infrastructure.
• Possessing strong analytical, technical and communication skills with specific experience in SOC, security-as-a-service, and the associated current enabling technology roadmaps.
• Knowledge on how to secure an enterprise's architecture by determining security requirements.
• Knowledge of various security tools (e.g., AV, HIPS, firewalls, VPN, DLP, etc.) with product experience in Corelight/Verodin.
• Maintain and provide technical expertise for Network detection and response in support of SOC Operations
• Apply subject matter expertise to specific incident, security application or enterprise environment to improve security posture or resolve issues.

Required Skills:

• Hands on experience utilizing Corelight, Verodin or related network detection, simulation and response products and network or security administration
• Four plus years of professional IT and/or Cyber experience
• Bachelor's Degree OR an additional 4 years of IT and/or Cyber experience

Preferred Skills:

• One or more related certification such as CISSP, CCNP, Security+, AWS Solutions Architect, AWS Certified Developer, Azure Fundamentals, Azure Administrator Associate, Azure DevOps Engineer, Splunk Core Consultant, Elasticsearch Engineer, applicable Security vendor certifications (Microsoft, Red Hat, McAfee, Tenable, Carbon Black, Cylance, FireEye, CrowdStrike, etc.).
• Experienced in the acquisition, design, sizing, deployment, installation, maintenance, operating and usage of the Government Enterprise networks
• Experience with SIEM or other network event logging, monitoring and scanning technologies
• Familiarity with the NIST 800, FedRAMP, Risk Management Framework, Security Controls, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines

Government Careers

Show more