IT Security Operations Analyst - Mid

Job not on LinkedIn

July 28

Apply Now

Receive Emails with Similar Jobs

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

Cybersecurity • Healthcare Insurance • SaaS

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

51 - 200 employees

Founded 2011

🔒 Cybersecurity

⚕️ Healthcare Insurance

☁️ SaaS

📋 Description

• Serve as a front-line incident handler, performing real-time triage of security alerts from Microsoft Defender, Sentinel, Trellix, and other EDR/SIEM tools. • Analyze logs, network traffic, and security events to validate incidents and identify root causes. • Lead initial incident response actions and escalate to senior analysts or SOC leads per established playbooks. • Assist in the assessment, implementation, and maintenance of security measures for GPO systems in alignment with NIST SP 800-37 and SP 800-53. • Maintain and enhance incident response playbooks, escalation procedures, and detection logic to improve SOC efficiency. • Participate in operational reviews and contribute to incident after-action reports and mitigation recommendations. • Coordinate with ITOPS, ISSM, and engineering teams during threat response activities. • Create and maintain security control test results, asset inventories, and remediation documentation in GRC repositories. • Contribute to RMF artifact generation such as POA&Ms, data flow diagrams, and patch/upgrade schedules. • Ensure all documentation reflects the latest changes to production environments and security tools.

🎯 Requirements

• Minimum Experience: 4 years of experience in a SOC, cybersecurity operations, or security analysis role. • Minimum Education: Bachelor’s degree in Computer Science, Information Systems, other related disciplines (or equivalent experience) • Technical Knowledge: Familiarity with RMF processes and security documentation. Hands-on experience with SIEM and EDR platforms such as Microsoft Sentinel, Defender, Trellix, or Rapid7. Federal experience (preferred) • Certifications (preferred): CompTIA Security+, CySA +, Certified SOC Analyst (CSA), ITIL v4 Foundation