• Monitor all identified devices and applications via provided dashboards on program networks
• Perform event and incident management in accordance with established processes and procedures
• Conduct backup and recovery procedures as needed
• Analyze network events within all program networks
• Report outages or incidents following guidelines and procedures
• Responsible for security event monitoring utilizing SIEM toolsets
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident
• Utilize security and operation analytics tools for log collection, analysis, and alerting
• Perform additional tasks or duties as directed by the NOSC Lead
• Provide Mobile Phone support to include activating and deactivating SIM cards
• Other duties as assigned

Required Qualifications

• Bachelor's degree. Associate's degree with 2+ years relevant experience or 4 years relevant experience may substitute.
• 5 years relevant experience.

Preferred Qualifications

• Experience with a variety of security tools such as: FireEye, WireShark, NetWitness, Palo Alto, Cisco ASA, F5, tcpdump, Snort, Splunk, EMET, Bit9/Carbon Black, Stealthwatch, Ironport, McAfee ePO, Nessus, CounterACT
• 24/7 NOSC environment and understanding how it works while supporting commercial or government clients.
• Cyber threat capabilities and technical capabilities to defend networks and systems.
• Network operating systems, SLOs, and service expertise.

NA