Job Title: Tier 1 Security Operations Center Analyst

Company: Dito, LLC

Location: Remote (VA, TX, FL, GA, ID, IL, LA, NJ, NY, NV)

Job Type: Contract

Job Summary

Looking to get started in your cyber security career? Dito is looking for highly motivated and knowledgeable candidates to join our Managed Security Services Operations Center.

This is a 100% remote position that will play a key role in safeguarding our clients’ networks and critical information systems. You’ll be part of a team that is responsible for 24/7 x 365 continuous monitoring and will be expected to work night shifts.

As a Junior Security Operations Analyst, you will be responsible for monitoring and responding to security alerts generated within customer environments, assisting in the initial triage of security events, and providing support throughout the resolution process.

A desired trait of our candidates is someone who is proactive and willing to step outside of their comfort zone to learn new technologies. You’ll be expected to challenge yourself and become adept with the Google SecOps Platform.

Key Responsibilities

Monitor and Analyze Threats: Continuously monitor security events and alerts from Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) platforms, and other security event data sources daily. Analyze relevant cyber security event data and other data sources for attack indicators and potential security breaches. Proficiently analyze logs and alerts from various sources, such as network devices, servers, cloud services, firewalls, web servers, and Syslogs, to identify potential security incidents.
Incident Triage and Response Support: Determine if security events monitored should be escalated to incidents and follow all applicable incident response and reporting processes and procedures. Triage security events and assist in coordinating response activities. Support the progress of security incident resolution. Execute Incident Responses for all incidents involving the system and prepare incident reports.
Documentation and Reporting: Document the analysis process for alerts and cases capturing key pieces of evidence and assessments. Assist in producing reports on security incidents and response activities.
Collaboration and Support: Coordinate with engineering teams to ensure all security monitoring systems are online, up to date, and fully operational. Review data with Cyber Threat Intelligence Teams, Incident Response Teams, and other appropriate groups to determine the risk and threat of an event. Work closely with cross-functional teams, including IT Infrastructure, Network Engineering, and Cloud Operations, to remediate security issues.
Operational Support: Support production of documentation and associated artifacts for Cybersecurity requirements. Validate IA Vulnerability Alerts (IAVAs) via vulnerability scanning. Support continuous monitoring and compliance testing. Perform necessary auditing and audit review. Perform or monitor account management. Ensure backups of audit logs are performed weekly.
Continuous Improvement: Maintain a high level of awareness of emerging threats and vulnerabilities. Propose and implement improvements to the customer’s Google SecOps environment.
Adherence to Policies: Adhere to company policies and procedures, including those related to security and confidentiality.

Essential Requirements

Experience:
- 1+ year of IT experience.
- Experience in security operations or incident response is desired.
- Experience as a SOC analyst or other cyber-related field is preferred.
- Associate’s / Applied Associate’s degree with 2 years of relevant experience, or a Bachelor’s degree with 0 years of relevant experience, are considered.
Technical Skills:
- Strong understanding of security principles and technologies.
- Experience with Security Platforms such as Splunk, QRadar, Elastic, or Google SecOps (strongly preferred).
- Knowledge about configuring and deploying SIEM, SOAR, and log forwarders.
- Knowledge of cybersecurity operations, including protection, detection, response, and sustainment.
- Knowledge and understanding of current cybersecurity technologies and emerging innovations.
- Familiarity with MITRE ATT&CK framework.
- Technical writing skills.
Soft Skills:
- Strong analytical, attention to detail, and problem-solving skills.
- Ability to work independently and as part of a team.
- Excellent communication and interpersonal skills, including the ability to create technical reports based on analytical findings.
- Ability to work fixed scheduled night shifts, or rotating shifts, in a 24/7/365 environment.
- Able to work under pressure during cyber incidents and think critically.
Work Environment & Clearance:
- A private and secure remote working environment is required for remote positions.
- Ability to pass criminal background checks, financial background checks, and periodic drug screenings.
- Experience handling CJIS information and data

Desired Qualifications

Relevant certifications in cybersecurity (e.g., Security+ or CYSA+, GCIH, GIAC).
Experience with scripting or automation tools (such as Python, PowerShell, or Bash).
Knowledge of cloud security principles and best practices.
Familiarity with Google Cloud Platform.
Familiarity with Google SecOps

Schedule: The typical work week for this role includes three 12-hour night shifts and a single 4-hour shift. Weekend and holiday work may be required given the operational needs of the position. This schedule remains flexible and is subject to adjustment according to resource availability and business requirements.

Pay: $33.00 – $41.09 per hour

Expected hours: 40.0 per week

Shift availability: