Detection & Monitoring Analyst

This is a fully remote position, open to applicants in Florida.

📋 Description

• Oversee approved testing activities within SIEM, EDR/XDR, identity, endpoint, network, cloud, and ticketing systems.

• Confirm that anticipated signals are produced, correlated, enriched, prioritized, and accurately displayed in alerts.

• Track analyst triage, escalation, communication, and handling timelines against set criteria and agency standards.

• Conduct alert investigations, analyze packet and network traffic, correlate logs, review IOCs, and analyze malware or phishing incidents within the approved scope, along with reconstructing event timelines.

• Create or suggest enhancements to detection logic, use cases, correlation rules, dashboards, and tuning measures.

• Maintain controlled evidence packages that include screenshots, alerts, queries, logs, timestamps, ticket records, analyst actions, and annotations.

• Identify gaps in telemetry, blind spots, false negatives, inaccurate severity assessments, weak correlations, and flawed escalation pathways.

• Assist with vulnerability, remediation, and incident-specific reviews as requested through OCIG.

• Facilitate knowledge-transfer sessions focused on detection validation and evidence interpretation.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, information assurance, computer science, or a related field, or equivalent experience in a SOC.

• Certification evidence in relevant professional areas such as CISSP, CISA, PMP, CEH, or other pertinent certifications.

• A minimum of 4 years of practical experience in SOC operations, detection engineering, intrusion analysis, continuous monitoring, incident response, network security, or threat-hunting.

• Proficiency with SIEM and EDR/XDR platforms, log query languages, network telemetry, MITRE ATT&CK mapping, case management, and incident escalation processes.

• Capability to accurately document expected versus observed outcomes and uphold evidence integrity.

• Familiarity with NIST CSF Detect outcomes and access-control telemetry.

• Openness to completing the government-issued background investigation process.

🏝️ Benefits

• Anticipated travel to Tallahassee, FL.

• Equal opportunity employment protections.

• Chance to engage in knowledge-transfer sessions regarding detection validation and evidence interpretation.