Monitors dashboards and intrusion detection and prevention systems (IDS/IPS); performs initial analysis and investigation into alerts as they are seen (to include anti-virus and phishing alerts); performs initial malware analysis utilizing automated means; supports cyber defense functions to protect COH from cyber security incidents that have potential to cause negative impact; incident intake, ticket updates and reporting of cyber events; utilizes SOC monitoring devices (SIEM, IDS, DLP) to review and analyze pre-defined events indicative of incidents; understanding, identifying and researching IOCs; uploading packets and evaluating source/destination activity and payloads; assists in recommendations for content to detect incidents, including IOCs for blocking and detection

Education: Bachelor’s Degree in Engineering, Computer Information or Information Technology, Cybersecurity or Information Assurance or equivalent work experience of 5 or more years.
Certifications: GIAC Security Essentials: Network, Endpoint & Cloud (GSEC), GIAC Advanced Security Essentials – Enterprise Defender (GCED), GIAC Blue Team Fundamentals: Security Operations and Analysis (GSOC); GIAC Hacker Tools, Techniques, and Incident Handling (GCIH)