A

A&M Technologies, Inc.

Builds software and manages federal IT systems

NOSC Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeHerndon, VA, USA$140k - $160kIn-person

About the Job

Requirements

  • A bachelor's degree in Computer Science, Information Systems, or a related technology field.
  • At least five years of experience in security operations, with demonstrated leadership in customer-facing roles.
  • CASP+, Certified Ethical Hacker, GIAC Certified Incident Handler, or another relevant certification qualifying under DoDM 8140.03 AIM/AIT Level III.
  • Proficiency in analyzing cyberattacks, understanding attack classifications and stages, and identifying system and application vulnerabilities while ensuring compliance with Department of Defense policies and procedures.
  • Extensive knowledge of network topologies and protocols, including TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, and SMB.
  • Hands-on experience with AWS, Cisco, Splunk SIEM, Splunk Forwarders, IDS/IPS, VMware, SSL decryption, proxy and DLP operations, and Windows- and Linux-based endpoints.
  • A strong understanding of threat intelligence integration across multiple enterprise layers.
  • An active Top Secret clearance and the ability to obtain or maintain SCI and a CI polygraph.

Responsibilities

  • Support maintenance of a Network Operations and Security Center (NOSC), including continuous monitoring, incident response, and threat hunting.
  • Work and cross-train with co-located NOC analysts, providing relevant artifacts and analysis to assist with troubleshooting network transport incidents.
  • Assist program management staff with prioritization and milestone tracking for SOC and NOC operations and maturity-governance efforts.
  • Manage the SIEM platform to monitor error conditions and security alerts, and coordinate vulnerability assessments and artifact collection across the enterprise.
  • Evaluate network structures and device configurations for security risks, recommend best practices, and gather data to identify and respond to network intrusions.
  • Analyze cloud and on-premises network traffic and system logs to identify error conditions, malicious activity, exploited vulnerabilities, and attack methods; develop processes to improve SOC and NOC response and efficiency.
  • Conduct technical analyses of computer evidence, research and integrate security tools into the SOC, and prepare reports for technical and non-technical audiences in accordance with established policies, procedures, and applicable regulations.
  • Reconstruct attacks using network traffic analysis, integrate threat intelligence, and apply familiarity with the MITRE ATT&CK framework.
  • Collaborate across multiple locations.

About the Company

A&M Technologies, Inc.

Builds software and manages federal IT systems

A&M Technologies builds software and manages IT systems for federal agencies and the companies that support them. Its engineers connect separate applications through interfaces, automate business processes and maintain the infrastructure used to run enterprise systems. The business combines application development with systems engineering, IT security and project management, so customers engage it for technical work from planning through implementation and ongoing support. It also designs and configures virtualized infrastructure, which lets software run on shared computing resources rather than dedicated physical machines. Founded in 2014, A&M is headquartered in Ashburn, Virginia.

Company size
11-50
Company stage
Not listed
Total funding
Not listed
Headquarters
Ashburn, VA
Founded
2014

Recently Posted Jobs

Explore more opportunities at A&M Technologies, Inc.

See more jobs