SOC Analyst - Secret Clearance

Dunhill Government Solutions is hiring SOC Analysts to help secure the information systems, networks and data of a federal health program. You will monitor, detect, investigate, analyze and respond to cybersecurity incidents, implement protective measures, and work closely with IT, operations, compliance and risk management teams to keep the program's systems in line with its cybersecurity requirements, policies and best practices. This is a fully remote (telework) role.

Responsibilities:

• Monitor, detect, investigate, analyze and respond to cybersecurity incidents affecting program information systems, networks and data
• Implement protective measures and mitigation strategies
• Collaborate with IT, operations, compliance and risk management teams to ensure compliance with cybersecurity requirements, policies and best practices
• Conduct security assessments using tools such as firewalls and IDS/IPS
• Develop documentation supporting data security best practices
• Support application and server security activities, including identifying and mitigating web application vulnerabilities (e.g., OWASP Top 10), encryption/hashing practices and static code analysis
• Apply knowledge of identity and access management (SSO, RBAC) and secure operating environment practices (Unix/Linux)

Required qualifications:

• Associate's degree
• 3-5 years of experience in cybersecurity / information security operations
• Fundamental understanding of cybersecurity principles and training or experience with security tools (firewalls, IDS/IPS)
• Experience conducting security assessments and implementing mitigation strategies
• Active Secret clearance
• Security+ or other DoD 8140 IAT-II compliant certification
• Strong problem-solving, analytical, communication and interpersonal skills; able to manage multiple tasks with attention to detail, independently and as part of a team
• US citizen

Preferred: Familiarity with federal health IT environments and their cybersecurity requirements; experience with incident response processes and documentation development; knowledge of web application security best practices (OWASP Top 10) and secure / static code analysis.

Location: Full-time telework (remote), US. No travel required.

Schedule: Full-time, 40 hours/week, day shift.

Clearance: Active Secret clearance required. US Citizenship required.

Compensation: $105,000 - $116,000 per year

#cjpost