CND Analyst - SOC Job at By Light Professional IT Services, Falls Church, VA

cW5DNy92UGFQeGlySFoxR052U0JXSEpVeUE9PQ==
  • By Light Professional IT Services
  • Falls Church, VA

Job Description

Company OverviewBy Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.Position OverviewBy Light has an opening for a CND Analyst - SOC supporting the Army National Guard (ARNG) in Falls Church, VA. This is an IT Service Management contract in support of the operation, modernization, expansion, and further evolution of the ARNG’s global Information Technology (IT) services including networking, compute, storage, infrastructure, applications, hosting, and program management services. The Guard Enterprise Cyber Operations Support (GECOS) program supports the ARNG enterprise IT infrastructure, its Wide Area Network (WAN), authentication and directory services, cybersecurity, application hosting, and associated services. GECOS uses ITIL best practices framework as the basis for IT Service Management (ITSM) model.This position is: Thursday through Saturday (12-hour shifts) and every other Wednesday (8-hour shift)ResponsibilitiesThe ARNG SOC works to monitor enterprise systems, defend against security breaches, and identify, investigate, and mitigate cybersecurity threats. In support of the SOC, the Watch SOC Team staff shall:Manage the operation of the SOC and the performance of traditional SOC activities on behalf of ARNG 24/7/365 to protect DoD information systems and infrastructure.Develop a SOC Communications Plan.Support the RCC-NG in the execution of traditional SOC activities during COOP exercises at a designated COOP site. If it becomes necessary to temporarily relocate SOC operations to a selected alternate site for emergency or test scenarios, support and extend normal SOC operations to that remote location.Provide technical reports to analyze and summarize the impact of each significant incident and the recovery costs; the capability and effectiveness of Computer Network Defense (CND) sensor coverage and the O&M costs; and the number and categories of threats of concern identified by the SOC and supplied to the SOC by external Government agenciesAuthor and implement custom detection content (e.g., reports, assets, cases, connectors, customers, dashboards, field sets, files, filters, integration commands, knowledge base, lists, notifications, pattern discovery, query viewers, reports, rules, stages, and users).Tune the SIEM and IDS/IPS events to minimize false positives.Analyze and review monitoring SOC metrics.Evaluate and analyze hardware and software in coordination with and support of the RCC-NG.Improve processes including developing and refining analysis techniques.Coordinate and report ISS‐related incidents.Provide support in assembling, evaluating, and monitoring various intrusion detection sensors or tools and associated software applicationsProvide DMA support services involving forensic analyses on a variety of digital media devices and mediums to identify, reverse engineer, and de‐obfuscate content related to an incident, such as malicious contentRequired Experience/QualificationsBachelor's degree requiredWillingness to work the required shift of Thursday through Saturday (12-hour shifts) and every other Wednesday (8-hour shift)Minimum 5 years IT relevent experience and 3 years SOC operations supportExperience managing firewall, IDS/IPS, and router ACL policiesExperience with vulerability management assessment and mitgationPossess the appropriate DoD 8570 CSSP Analyst, Infrastructure, or Incident Responder certification e.g., CEH, CySA+, CCNA+, SSCP, CGIA. Preferred Experience/QualificationsCisco CertificationPalo Alto CertificationPossess an ITIL v3 or ITIL 4 Foundation or a higher certification in either categorySpecial Requirements/Security ClearanceActive SECRET DoD clearance or higherSalary RangeSalary Minimum: $85,000Salary Maximum: $115,000The annual base salary provided is a guideline for this position and is not a guarantee of compensation or salary. When extending an offer, By Light also considers other variables such as (but not limited to) work experience, education, training, skill set, internal peer equity, clearance level, and market conditions. In addition, By Light provides an extensive selection of benefits and offerings to our employees.Job SummaryID: 2026-11248# of Openings: 1Category: CyberClearance: Tier 3 - Secret/ADP II

Job Tags

Contract work, Work experience placement, Worldwide, Relocation, Shift work

Similar Jobs

North Central Mental Health Services, Inc.

Residential Group Home Care Worker, 2nd & 3rd Shift Job at North Central Mental Health Services, Inc.

 ...Job Description Job Description Residential Group Home Care Worker Make a Difference Every Day! Support. Encourage. Empower. Join our team as a Residential Group Home Care Worker and provide compassionate support in adult living facilities across Northwest Columbus... 

Plymouth Rock Assurance

Actuarial Analyst Intern Job at Plymouth Rock Assurance

 ...Actuarial Analyst Intern Our Boston Actuarial team is seeking a self-motivated and creative individual with a strong desire to work with Product Management and other teams to bring statistical rigor and analysis into everyday processes. Under general direction,... 

Stanley Black & Decker

Corporate Pilot Job at Stanley Black & Decker

 ...Corporate Pilot Charlotte, NC, USA Come build something that matters. It takes great people to achieve greatness. People with a sense of purpose and integrity. People with a relentless pursuit of excellence. People who care about making things better For Those... 

McGrath

Construction Technician Job at McGrath

 ...construction work related to remodeling or modifying modular buildings Demolish, replace or construct walls, including framing, drywall and other finish-out functions Light electrical work; changing bulbs, rewiring or adjusting wiring within a frame or wiring for... 

Dunhill Professional Search

System Administrator Job at Dunhill Professional Search

 ...Administer and maintain Microsoft SCCM/MECM infrastructure, including software deployment, patch management, operating system deployment, and...  ...endpoint configuration. Provide advanced troubleshooting and support for Windows Server environments (2016, 2019, 2022, and future...