CIOCC Tier 1 Analyst

We are Hirng! Our FDA Program is growing, and we are looking for a motivated and detail-oriented CIOCC Tier 1 Analyst to join our cybersecurity operations team.

The CIOCC Tier 1 Analyst serves as the first line of defense in monitoring, analyzing, and responding to cybersecurity events and incidents. This role is critical in maintaining the security posture of our environment by identifying potential threats and ensuring timely escalation and response.

Key Responsibilities:

• Monitor and analyze security events from multiple sources, including SIEM, Firewalls (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Detection and Response (EDR), Network Access Control (NAC), and other client data sources.
• Triage and respond to alerts in real time, identifying potential threats and escalating incidents based on severity and established procedures.
• Perform initial incident validation, categorization, and prioritization.
• Document, track, and manage security incidents within ticketing systems, ensuring accuracy and timeliness.
• Collaborate with Tier 2 and Tier 3 analysts to support incident investigation, containment, and remediation.
• Follow established standard operating procedures (SOPs) and incident response playbooks.
• Correlate data across multiple security tools to identify suspicious patterns or malicious activity.
• Maintain situational awareness through continuous monitoring of dashboards, alerts, and reports.
• Contribute to process improvements by providing feedback on detection rules and workflows.
• Ensure compliance with FDA security policies, standards, and regulatory requirements.

Required Qualifications:

• Bachelor’s degree and 2 years of experience or 6 years with a HS diploma/equivalent

• Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity
• Excellent written and verbal communication skills required. Must be able to communicate technical details clearly
• Splunk or similar SIEM tool
• Must be a US Citizen
• Must be able to obtain and maintain the required agency clearance

Preferred Qualifications:

• CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. – One or more preferred
• IDS Log analysis skills
• Packet Capture tools and analysis
• Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, SSO, DNS)
• Familiarity with AI technologies and integration of AI into workflows is preferred
• Prior military/government experience preferred