SOC Technician

Location: Laurel, MD
ApplyLogic is a fast-growing Veteran-Owned consulting firm, headquartered in Dunn Loring, VA. Our people are our greatest asset and our company culture is grounded on that belief. We offer challenging and interesting work in a friendly and supportive environment. We deliver best-in-class technical expertise to the Federal Government market through IT professional service contracts. 

We offer a competitive salary with a robust Fortune 500 type benefits package: employee assistance, employee adoption, 401K with match, medical, dental, vision, life, short-term and long-term disability, 15 paid time days off, 10 holidays, unlimited web-based training and up to $5K towards continuing education and/or professional development and more!
 
Founded in 2004, ApplyLogic is a Veteran Owned Small Business, ISO9001:2008 certified with over $7M annual revenues and 35 employees. Our growth has been recognized in the Washington Technology Fast 50 and the INC. 5000. We have an immediate SOC Technician position available in Laurel, MD.

Job Description and Responsibilities:

The SOC Technician will possess experience with  network, endpoint, threat intelligence, forensics and malware reverse engineering, as well as the functioning of specific applications or underlying IT infrastructure; has analyzed phishing emails including email headers, malware, source code, acts as a first responder to account/system attacks and compromises to determine threat vectors and provide initial remediation; uses SIEM to monitor/analyze incidents, and works with stakeholders to resolve incidents; escalates incidents when necessary using policies and procedures, closely involved in developing, tuning and implementing threat detection analytics.
 
 
  • Act as network incident first responder for a 24/7 staffed SOC, reviewing and verifying system alerts
  • Assist with the development of incident response plans, workflows, and SOPs
  • Maintain security sensors and tools
  • Monitor security sensors and review logs to identify intrusions
  • Escalate security incidents using established policies and procedures
  • Uses tools and techniques to perform initial  extraction, de-obfuscation, or other manipulation of malware related data
  • Perform initial analysis of  security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
  • Work directly with cyber threat intelligence analysts to convert intelligence into useful detection
  • Collaborate with incident response team to rapidly build detection rules as needed
  • Identify incident root cause and take proactive mitigation steps
  • Review vulnerabilities and track resolution
  • Review and process threat intel reports
  • Implement detection use cases
  • Implement IDS signatures
  • Assist with incident response efforts
  • Provide critical information for  customer report briefs
  • Participate in table top exercises
 
 
Required Skills:
  • Knowledge of root causes of malware infections and proactive mitigation
  • Knowledge of lateral movement and footholds
  • Understanding of data exfiltration techniques. 
  • Have real world experience analyzing complex attacks and understand TTPs of threat actors
  • Experienced with network/host based intrusion analysis, malware analysis, forensics, and cyber threat intel
  • Knowledge of advanced threat actors and complex attacks
  • Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
  • Splunk experience
  • Familiar with operating systems, network architecture and design, and enterprise SIEM solutions
  • Scripting abilities in PowerShell/Python
  
Education and Certifications
  • Bachelor’s Degree and 10 years of experience
  • Sec+
 
Clearance:
  • U.S. Citizenship
  • Public Trust, or must be able to obtain a Public Trust clearance
this job portal is powered by CATS
ApplyLogic is an equal opportunity employer. The Equal Employment Opportunity Policy of ApplyLogic is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. ApplyLogic hires and promotes individuals solely on the basis of their qualifications for the job to be filled. ApplyLogic believes that associates should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status or disability.