SOC Analyst

About Us: PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team. Responsibilities PUNCH is king for a Cyber Security Analyst (Remote Position) to work with our team supporting a Federal civilian agency’s Security Operations Center (SOC). As a Cyber Security Analyst, you will be given the opportunity to learn from an experienced team of security professionals about both traditional and unconventional ways to detect, analyze, and mitigate potential intrusions and other security incidents. Minimum Requirements: · 1-3 years’ work experience in Network Security Background (formal or informal) in hands on computer and networking experience to include a good understanding of TCP/IP, routing, and major Internet protocols Strong desire and ability to learn and experiment with new technologies Must be able to work independently as well as in a team environment US Citizen Preferred qualifications: BS in a technical field, Computer Science, Mathematics, or Statistics Incident response (IR) experience Experience with Splunk ES (SIEM Platform) Experience with Cyber Security Tools log such as Network and Web Application firewalls, vulnerability management, and proxy servers Experience analyzing EDR logs (MS Defender) Experience analyzing Windows event and Sysmon Logs Experience analyzing VPN Logs (GlobalProtect) Experience with ticketing solutions such as ServiceNow Experience with Jira/Confluence Strong verbal and written communication skills Have current Cybersecurity Certifications such as Security +, CySA+, CEH · Candidates must be willing to work in a SOC environment, demonstrate strong problem solving skills, allow for flexible scheduling, and be able to clear a Federal Civilian Agency’s clearance process. Weekend and holiday work will be required. Shift is a 4 days/10 Hour weekly schedule allowing for 3 days off per week. Proposed Schedule: (with limited flexibility) First Shift: -Sunday – Wednesday, 06:00am - 4pm Or -Wednesday – Saturday, 06:00am – 4pm. Second Shift: -Sunday – Wednesday, 2:00pm-00:00 (Midnight) Or -Wednesday – Saturday, 2:00pm – 00:00 (Midnight) Third Shift: -Sunday – Wednesday, 10:00pm-8:00am Or -Wednesday – Saturday, 10:00pm-8:00am.