Junior SOC Analyst (DoD Secret Clearance)

COMPANY OVERVIEW

Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field.

We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following:

• Be Driven - We are fueled by the hunger to learn more and do more.
• Be Curious - We engage in continuous improvement - never accepting the status quo.
• Be Humble - We seek honest feedback to strengthen our relationships.
• Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

Strive for excellence and consider joining our growing team today!

COMPANY OVERVIEW

Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field.

We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following:

• Be Driven - We are fueled by the hunger to learn more and do more.
• Be Curious - We engage in continuous improvement - never accepting the status quo.
• Be Humble - We seek honest feedback to strengthen our relationships.
• Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

Strive for excellence and consider joining our growing team today!

JOB OVERVIEW

MartinFed has an opening for a Junior SOC Analyst to join our team of talented and diverse individuals supporting the NASA Security Operations Center (SOC). The Triage Analyst will monitor, analyze, categorize, document, and report cybersecurity events and service requests from initial detection through final resolution in accordance with NASA standard operating procedures and established service level timelines. This role requires more than ticket management; analysts must be able to recognize potential cybersecurity incidents, analyze phishing and potentially malicious emails, understand common cyberattack techniques, and apply fundamental networking and cybersecurity concepts to determine the appropriate response and escalation. The NASA SOC operates 24/7/365 and requires analysts to work rotating shifts once fully trained.

ESSENTIAL FUNCTIONS

• Monitor, triage, document, and report cybersecurity events and incidents from initial detection through final resolution in accordance with NASA standard operating procedures and established service level timelines
• Analyze reported cybersecurity events and determine whether activity represents a legitimate cyber incident or requires additional investigation
• Analyze phishing and potentially malicious emails, including identifying suspicious senders, links, attachments, and other indicators of compromise
• Apply an understanding of common cyberattack techniques, cybersecurity threats, and Cyber Defense principles to support effective event triage and escalation
• Submit and track all service tickets submitted on behalf of NASA SOC internally and to external organizations
• Monitor and log SOC Request/CNOC actions and responses
• Provide timely acknowledgment of SOC service requests, problem identification, root cause analysis, escalation, resolution, and closure in accordance with established SLAs and OLAs
• Categorize and prioritize cyber events and other SOC service requests based on established procedures
• Escalate cyber incidents that require further in-depth analysis to SOC Incident Analysis
• Assist with network investigations of significant cybersecurity incidents and associated reporting
• Apply general networking knowledge, including TCP/IP, UDP, HTTPS, DNS, and other core protocols, to support cybersecurity event analysis and investigation
• Document and track incidents via NASA's authoritative incident management system in accordance with established reporting procedures
• Archive and maintain historical SOC data and incident records
• Provide situational awareness throughout NASA on cybersecurity-related issues impacting the NASA enterprise in accordance with NASA policies and procedures
• Communicate effectively with SOC personnel, customers, and external organizations regarding cybersecurity events, incidents, and service requests
• Work effectively in a fast-paced 24/7/365 Security Operations Center environment
• Once fully trained, work rotating shifts as required to support continuous SOC coverage. Standard schedules consist of four 10-hour shifts, with schedules of either Sunday-Wednesday or Wednesday-Saturday. Shift windows include day shift (7:00 AM-5:00 PM), evening shift (1:00 PM-11:00 PM), and night shift (9:00 PM-7:00 AM)

QUALIFICATIONS

• U.S. Citizen with an active DoD Secret clearance
• Bachelor's Degree
• 2 years of directly related cybersecurity experience
• Strong understanding of cybersecurity fundamentals and concepts
• Strong understanding of email analysis and the ability to identify potentially malicious or phishing emails
• Understanding of common cyberattack techniques and cybersecurity threats
• General networking knowledge, including TCP/IP, UDP, HTTPS, DNS, and other core protocols
• Demonstrated understanding of Cyber Defense principles
• Ability to recognize, categorize, prioritize, and appropriately escalate potential cybersecurity incidents
• Possess excellent communication and interpersonal skills

DESIRED QUALIFICATIONS

• Familiarity in a command line environment across operating systems
• Experience working in a 24x7 security operations center
• Experience with SIEM, EDR, email security, or other cybersecurity monitoring tools
• Familiarity with phishing analysis and indicators of compromise
• Knowledge of basic incident response and cybersecurity investigation processes
• Desired Certifications: SEC+, CySA+, GCIH

PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS

• Work must be performed on-site at NASA Marshall Space Flight Center.
• Working on a computer for long periods of time.
• May involve long period of sitting at a desk.
• The work environment is fast-paced and sometimes involves extreme deadline pressures.

OTHER DUTIES

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations.

If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling 855.212.1810. Thank you for your interest in MartinFed.

Please Note: All positions at MartinFed are contingent upon passing both a background check and drug screening prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer.