SOC Analyst

About Us:

PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based small business founded in 2012 operating as a cohesive team that incorporates the sum of our groups diverse skills talents and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine Best Workplaces awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications resources and past-performance that make us suitable to address the goals of our diverse customer-base. Further we have past and current experience supporting cyber operations and cyber ML-based research with well over 100 years of collective experience from our collaborative multi-disciplinary team.

Responsibilities

PUNCH is king for a Cyber Security Analyst (Remote Position) to work with our team supporting a Federal civilian agencys Security Operations Center (SOC).

As a Cyber Security Analyst you will be given the opportunity to learn from an experienced team of security professionals about both traditional and unconventional ways to detect analyze and mitigate potential intrusions and other security incidents.

Minimum Requirements:

• 1-3 years work experience in Network Security
• Background (formal or informal) in hands on computer and

networking experience to include a good understanding of

TCP/IP routing and major Internet protocols

• Strong desire and ability to learn and experiment with new technologies
• Must be able to work independently as well as in a team environment
• US Citizen

Preferred qualifications:

• BS in a technical field Computer Science Mathematics or

Statistics

• Incident response (IR) experience
• Experience with Splunk ES (SIEM Platform)
• Experience with Cyber Security Tools log such as Network and Web Application firewalls vulnerability management and proxy servers
• Experience analyzing EDR logs (MS Defender)
• Experience analyzing Windows event and Sysmon Logs
• Experience analyzing VPN Logs (GlobalProtect)
• Experience with ticketing solutions such as ServiceNow
• Experience with Jira/Confluence
• Strong verbal and written communication skills
• Have current Cybersecurity Certifications such as Security CySA CEH

Candidates must be willing to work in a SOC environment demonstrate strong problem solving skills allow for flexible scheduling and be able to clear a Federal Civilian Agencys clearance process.

Weekend and holiday work will be required.

Shift is a 4 days/10 Hour weekly schedule allowing for 3 days off per week.

Proposed Schedule: (with limited flexibility)

First Shift:

-Sunday Wednesday 06:00am - 4pm Or

-Wednesday Saturday 06:00am 4pm.

Second Shift:

-Sunday Wednesday 2:00pm-00:00 (Midnight) Or

-Wednesday Saturday 2:00pm 00:00 (Midnight)

Third Shift:

-Sunday Wednesday 10:00pm-8:00am Or

-Wednesday Saturday 10:00pm-8:00am.