XOR Security

XOR Security is currently seeking a Senior level SOC Analyst to support a managed virtual SOC for various customers.  The program provides comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.  VSOC Analysts will conduct security event monitoring, advanced analytics and response activities in support of the CND operational mission for multiple entities.  To support this vital mission, XOR staff are on the forefront of providing Advanced CND Operations to include the development of advanced analytics and countermeasures to protect critical assets from various cyber threats. To ensure the integrity, security and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, analysis and incident response. A strong work ethic, diligent time and attendance, written and verbal communications skills are a must along with the ability to work night shifts. The ideal candidate will have a solid understanding of cyber threats and information security in the domains of TTP’s, Threat Actors, Campaigns, and Observables. Additionally, the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management.  While the position is primarily remote, candidates that live within the Washington DC Metro region are strongly preferred as the operation in Falls Church, VA or customer site visits may be required.
 Shifts: Monday - Friday business hours - 100 REMOTE!
Required Qualifications:
<ul>
<li>Minimum 3+ years of experience in network defense environments.</li>
<li>Bachelors Degree</li>
<li>Strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis.</li>
<li>Prior experience and ability to with analyzing information technology security events to discern events that qualify as a legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response.</li>
<li>Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting is required (preferably within Splunk).</li>
</ul>
<ul>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts.</li>
<li>Strong logical/critical thinking abilities, especially analyzing security events from host and network event sources e.g. windows event logs, AV, EDR, network traffic, IDS events for malicious intent).</li>
<li>Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting, excellent verbal and written communications skills and ability produce clear and thorough security incident reports and briefings.</li>
<li>Excellent organizational and attention to details in tracking activities within various Security Operation workflows.</li>
<li>A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).</li>
<li>Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.</li>
<li>Ability to support coverage requirements for various shifts during holidays and weekends when required.</li>
</ul>
Desired Qualifications:
<ul>
<li>One or more certifications for CND Analysts:  GCIA, GCED, GCFA, GCFE, GCTI, GNFA, GCIH, ECSA, CHFI, CISSP, Security+, Network+, CEH, CND.</li>
<li>An understanding in researching Emerging Threats and recommending monitoring content within security tools.</li>
<li>Experience with one or more of the following technologies, such as: Splunk (including Core and ES), ArcSight, Elastic Search, IBM QRadar, Cisco FirePower, Carbon Black, FireEye (HX, NX, EX), Crowdstrike Falcon, Tanium.</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to one or more government security investigation and must meet eligibility requirements – US CITIZENSHIP REQUIRED.

Falls Church

Senior VSOC Analyst

XOR Security is currently seeking a Mid level SOC Analyst to support a managed virtual SOC for various customers.  The program provides comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.  VSOC Analysts will conduct security event monitoring, advanced analytics and response activities in support of the CND operational mission for multiple entities.  To support this vital mission, XOR staff are on the forefront of providing Advanced CND Operations to include the development of advanced analytics and countermeasures to protect critical assets from various cyber threats. To ensure the integrity, security and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, analysis and incident response. A strong work ethic, diligent time and attendance, written and verbal communications skills are a must along with the ability to work night shifts. The ideal candidate will have a solid understanding of cyber threats and information security in the domains of TTP’s, Threat Actors, Campaigns, and Observables. Additionally, the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management.  While the position is primarily remote, candidates that live within the Washington DC Metro region are strongly preferred as the operation in Falls Church, VA or customer site visits may be required.
 Shifts:
Monday - Friday - Regular Business Hours
Required Qualifications:
<ul>
<li>Minimum 3+ years of experience in network defense environments.</li>
<li>Bachelors Degree</li>
<li>Strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis.</li>
<li>Prior experience and ability to with analyzing information technology security events to discern events that qualify as a legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response.</li>
<li>Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms and/or log management systems that perform log collection, analysis, correlation, and alerting is required (preferably within Splunk).</li>
</ul>
<ul>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts.</li>
<li>Strong logical/critical thinking abilities, especially analyzing security events from host and network event sources e.g. windows event logs, AV, EDR, network traffic, IDS events for malicious intent).</li>
<li>Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting, excellent verbal and written communications skills and ability produce clear and thorough security incident reports and briefings.</li>
<li>Excellent organizational and attention to details in tracking activities within various Security Operation workflows.</li>
<li>A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).</li>
<li>Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.</li>
<li>Ability to support coverage requirements for various shifts during holidays and weekends when required.</li>
</ul>
Desired Qualifications:
<ul>
<li>One or more certifications for CND Analysts:  GCIA, GCED, GCFA, GCFE, GCTI, GNFA, GCIH, ECSA, CHFI, CISSP, Security+, Network+, CEH, CND.</li>
<li>An understanding in researching Emerging Threats and recommending monitoring content within security tools.</li>
<li>Experience with one or more of the following technologies, such as: Splunk (including Core and ES), ArcSight, Elastic Search, IBM QRadar, Cisco FirePower, Carbon Black, FireEye (HX, NX, EX), Crowdstrike Falcon, Tanium.</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to one or more government security investigation and must meet eligibility requirements – US CITIZENSHIP REQUIRED.

Mid Level VSOC Analyst

Avint

Client: Department of DefenseLocation: Falls Church, VARemote Capability: On-Site to start Clearance Requirement: Active DoD Top SecretThe Security Controls Assessor-Representative (SCA-R) will lead quality control and validation activities in support of the Risk Management Framework (RMF) authorization (and reauthorization) processes. This individual will work collaboratively with the ISSO Team to ensure each system authorization package satisfies quality, completeness and security requirements and standards.RequirementsPosition Responsibilities<ul> <li>Review RMF Body of Evidence (BoE) artifacts in support of system authorizations</li> <li>Assess system BoE artifacts for risk associated with technical and functional implementations for the systems and the adherence of those implementations to applicable cybersecurity / information assurance controls. </li> <li>Develop and maintain the SCA-R / Verification and Validation (V&amp;V) schedule in accordance with the timeline established by assigning and adding the necessary resources, based on the technologies that need validation and verification</li> <li>Utilize the SCA-R V&amp;V schedule to manage timing of and to conduct assessments and validations of implemented controls and remediated Plan of Actions and Milestones (POA&amp;M) items. </li> <li>Develop the Security Assessment Plan (SAP) for each system to facilitate assessment of all implemented security controls and technology areas through automated and manual assessments in accordance with NIST SP 800-53 and NIST SP 800-115; coordinate SAP for approval as required.</li> <li>Develop and submit V&amp;V reports and security assessment reports IAW Agency requirements including automated and manual assessment results and all pertinent information for a comprehensive assessment of the IS for completion of the POA&amp;M.</li> <li>Support, implement, and adhere to all NIST, Federal, DoD, DISA, and JSP policies, procedures, and standards regarding cyber security and the RMF</li> <li>Participate in and provide technical expertise to the JSP’s configuration management/configuration control boards while considering Federal, DoD and this agency’s security policies, standards and guidelines and its impact to requested changes.</li> </ul>Technical Areas of Expertise<ul> <li>Expert knowledge of NIST RMF processes, NIST SP 800-37, NIST SP 800-53, CNSSI 1253, policies, and DoD directives</li> <li>Expert ability to create and revise standard operating procedures (SOPs), work instructions (WI), and Tactics, Techniques, and Procedures (TTPs)</li> <li>Expert ability to create presentations and present policies, guidance, and procedures to varied audiences including senior leadership levels</li> <li>An impeccable attention to detail with significant RMF auditing, or security control assessment experience</li> <li>Excellent communication skills to include writing, executive briefing, and multi-disciplinary team collaboration</li> <li>Experience supporting Project Management activities to include project scheduling, resource planning, project monitoring and controlling, and reporting</li> </ul>Qualifications<ul> <li>Active DoD Top Secret clearance</li> <li>DoD 8570 IAT Level II Certification</li> <li>Bachelor’s Degree and 5+ years of prior experience, additional experience may be considered in lieu of degree</li> <li>Experience in providing security recommendations to senior leadership and PFPA imbedded ISSOs</li> <li>In depth knowledge of DoD cyber security policies and regulations</li> <li>6+ years of experience in Cybersecurity area</li> <li>5+ years Certification and Accreditation/ Assessment and Authorization</li> <li>3+ years Security Control Assessor/Validator Experience</li> <li>5+ years of project management work experience</li> <li>4+ years of demonstrated aggregate experience monitoring application and system security configurations and auditing IT systems and networks for compliance with DoD Cybersecurity policy</li> </ul>BenefitsJoining Avint is a win-win proposition! You will feel the personal touch of a small business and receive BIG business benefits. From competitive salaries, full health, 401K plan, and generous PTO and Federal Holidays.Additionally, we encourage every Avint employee to further their professional development. To assist you in achieving your goals, we offer reimbursement for courses, exams, and tuition. Interested in a class, conference, program, or degree? Avint will invest in YOU and your professional development!Avint is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity and Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

Security Control Assessor-Representative (SCA-R)

Apply to Cyber Security Jobs in Falls Church in companies remotely and near you. New Cyber Security Jobs in Falls Church added daily.

Job Position and Company	Location	Tags	Posted
Senior VSOC Analyst at XOR Security	Remote Full Time Soc Analyst Analyst Incident Response
Mid Level VSOC Analyst at XOR Security	Remote Full Time Soc Analyst Analyst Incident Response
Senior VSOC Analyst at XOR Security	Remote Full Time Soc Analyst Analyst Incident Response
Security Control Assessor-Representative (SCA-R) at Avint	Remote Full Time DOD Auditing Clearance

Cyber Security Jobs in Falls Church

0 Cyber Security Jobs in Falls Church. Page 1 of 1

4 closed cyber security jobs in falls church:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Falls Church

0 Cyber Security Jobs in Falls Church. Page 1 of 1

4 closed cyber security jobs in falls church:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter