[Remote] Security Operations Center Analyst

Note: The job is a remote job and is open to candidates in USA. RISCPoint is seeking a Security Operations Center Analyst to maintain the security and compliance posture of FedRAMP-authorized information systems through continuous monitoring, vulnerability management, and security operations. The role responds to security events, supports compliance assessments and reporting, and maintains security tools and documentation aligned with FedRAMP and NIST requirements.

Responsibilities

• Utilize and maintain automated security tooling for monitoring and response within customer environments
• Participate in an on call rotation to provide rapid response to potential security incidents
• Manage incident response notifications and communications
• Conduct routine vulnerability assessments and provide remediation guidance
• Perform weekly vulnerability scans using approved scanning tools
• Analyze vulnerability scan results and coordinate remediation efforts
• Monitor security alerts from SIEM, IDS/IPS, and other security tools
• Track security metrics and maintain compliance dashboards
• Maintain FedRAMP Continuous Monitoring compliance, including Cloud Security Posture Management (CSPM)
• Provide 24/7 on call support as needed
• Conduct quarterly threat hunting exercises
• Assist with monthly ConMon reporting deliverables
• Maintain Plan of Action & Milestones (POA&M) documentation
• Support 3PAO assessments and audits
• Configure and maintain security monitoring platforms
• Tune security tools to reduce false positives
• Develop custom detection rules and alerts
• Create security dashboards and reports

Skills

• 2 to 4 years in security operations, incident response, or a SOC analyst role
• 1 to 2 years working in AWS, particularly AWS GovCloud
• Experience with vulnerability management and remediation
• Hands on experience with SIEM platforms and security monitoring tools
• Experience analyzing security logs and investigating incidents
• Security+ or equivalent DoD 8570 IAT Level II certification
• Tenable Nessus, Qualys, Rapid7, or similar
• Google SecOps, Splunk ES, Microsoft Sentinel, or similar
• Suricata, Zeek, Snort
• AWS GuardDuty, AWS Security Hub, CloudTrail, VPC Flow Logs, AWS IAM
• CrowdStrike, Carbon Black, Microsoft Defender
• IR frameworks such as NIST SP 800-61
• NIST SP 800-53 Rev. 5 controls, FedRAMP
• Python, Ansible, AWS CLI, Terraform
• ISC2 CISSP or CCSP, or GIAC GCIH
• AWS Certified Security Specialty or AWS Certified Solutions Architect Associate

Benefits

• Bonus
• Company-paid health, dental, and vision insurance
• 401(k) with 3% company contribution (Traditional and Roth options)
• Generous vacation policy

Company Overview