- Company Name
- RISCPoint
- Job Title
- Security Operations Center Analyst
- Job Description
-
**Job Title**
Security Operations Center Analyst
**Role Summary**
Monitor, detect, and respond to security events across FedRAMP‑authorized cloud environments. Conduct continuous monitoring, vulnerability assessments, and incident response to maintain compliance with FedRAMP, NIST, and organizational controls. Collaborate with engineering, compliance, and audit teams to update documentation, validate control effectiveness, and provide threat intelligence.
**Expectations**
- Active participation in 24/7 on‑call rotation.
- Maintain up‑to‑date security tooling and documentation.
- Deliver timely incident notifications and remediate vulnerabilities.
- Ensure FedRAMP Continuous Monitoring alignment and produce threat‑hunting reports.
**Key Responsibilities**
- Operate and refine automated monitoring tools (SIEM, IDS/IPS, CSPM).
- Respond to alerts, conduct investigations, and dispatch incident communications.
- Execute weekly vulnerability scans (Nessus, Qualys, Rapid7), analyze findings, and coordinate remediation.
- Produce weekly dashboards, metrics, and quarterly threat‑hunting exercises.
- Maintain POA&M, SSP updates, and support 3PAO audits.
- Develop custom detection rules, tune alerts to reduce false positives, and create/maintain security dashboards.
- Lead continuous improvement of security posture in AWS GovCloud environments.
**Required Skills**
- 2–4 years SOC/incident‑response experience.
- 1–2 years AWS (GovCloud) security operations.
- Proficiency with vulnerability scanners: Tenable, Qualys, Rapid7.
- Hands‑on SIEM: Splunk ES, Azure Sentinel, Google SecOps.
- Knowledge of IDS/IPS (Suricata, Zeek, Snort).
- Cloud security services: GuardDuty, Security Hub, CloudTrail, IAM, VPC Flow Logs.
- Endpoint protection: CrowdStrike, Carbon Black, Microsoft Defender.
- Incident response frameworks (NIST 800‑61), NIST 800‑53 Rev. 5, FedRAMP compliance.
- Scripting/automation: Python, Ansible, Terraform, AWS CLI.
**Required Education & Certifications**
- Security+ or equivalent DoD 8570 IAT Level II.
- Preferred: ISC2 CISSP/CCSP, GIAC GCIH, AWS Security Specialist, or AWS Certified Solutions Architect – Associate.