Cybersecurity Analyst

SAIC is seeking a Senior Cyber Security Analyst to join our County of Orange Security Operations Center (SOC) team. The core mission of the SOC is to protect County assets, systems, and data against cyber threats. The Tier 2 Security Analyst will create, tune, monitor, and investigate Security Information and Event Management (SIEM) alerts and assist with other SOC functions such as incident response, digital forensics, data loss prevention, and vulnerability management actions.

Important notes:

• Since the SOC is a 7/24/365 operations center, it is expected that this person will work during some holidays.
• The SOC operates a hybrid shift model, with some days onsite and some days remote.
• Shift Rotation is to be expected based on operational needs, remaining on the same shift is not guaranteed. Reasonable notice time will be provided prior to any shift changes.

Responsibilities:

• Proactively monitor security events for networks and systems.
• Mentor and guide T1 SOC Analysts.
• Identify, investigate, and report on potential Security Incidents.
• Support risk and vulnerability assessment at the network, system, and application level.
• Support cyber metrics development, maintenance, and reporting.
• Support cyber threat intelligence development and reporting.
• Support routine identification, development and implementation of automation tasks.
• Proactively develop, recommend, and implement security controls and formulate operational risk mitigations along with assisting in security awareness programs.
• Research, evaluate, and recommend new security tools, techniques, and technologies and introduces them to the enterprise in alignment with IT security strategy.
• Utilizes COTS/GOTS and custom tools and processes/procedures to scan, identify, contain, mitigate and remediate vulnerabilities, and intrusions.
• Assists in the implementation of the required government policy (i.e., NIST) and makes recommendations on process tailoring.
• Performs analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.
• Routinely provide briefings to senior staff.