We’re Hiring

CSOC Tier 3 Cybersecurity Analyst

Visual Connections, LLC seeking a CSOC Tier 3 Cybersecurity Analyst.

Duties:

  • Work with detection engineering team to onboard and operationalize new cloud detection tools include Azure Sentinel, AWS Guard Duty, Netskope CASB etc.  

  • Develop playbooks for cloud incident response. 

  • Lead and actively participate in the investigation, analysis, and resolution of Tier 3 and escalated cybersecurity incidents. Analyze attack patterns, determine the root cause, and recommend appropriate remediation measures to prevent future occurrences. 

  • Serve as a cloud subject matter expert in handling incidents of varying complexity, providing guidance and support to Tier 1 and Tier 2 analysts during investigations.  

  • Ensure accurate and detailed documentation of incident response activities, including analysis, actions taken, and lessons learned. Collaborate with knowledge management teams to maintain up-to-date incident response playbooks.  

  • Collaborate effectively with cross-functional teams, including forensics, threat intelligence, IT, and network administrators. Clearly communicate technical information and incident-related updates to management and stakeholders. 

  • Develop and operationalize advanced security analytics use cases to detect and respond to sophisticated cyber threats in real-time. 

  • Monitor the performance of security analytics and automation processes regularly, identifying areas for improvement and taking proactive measures to enhance their efficacy. 

  • Leverage Security Orchestration, Automation, and Response (SOAR) platforms to streamline and automate incident response processes, including enrichment, containment, and remediation actions. 

  • Support the mentoring and training of more junior IR staff. 

  • Stay informed about the latest cybersecurity threats, trends, and best practices. Actively participate in cybersecurity exercises, drills, and simulations to improve incident response capabilities. 

Requirements:

  • Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent work experience)  

  • 5+ years of experience supporting large-scale IT related projects  

  • 3+ years of experience supporting incident response in an enterprise-level Security Operations Center (SOC) that includes monitoring of cloud environments.   

  • A deep understanding of cybersecurity principles, incident response methodologies, and a proactive mindset to ensure our SOC operates effectively in a high-pressure environment.  

  • Industry certifications, such as CISSP, GCIH, GCFA, CEH, or equivalent, are highly desirable    

  • Strong experience with security technologies, including SIEM, IDS/IPS, EDR, and network monitoring tools  

  • Experience with enterprise ticketing systems like ServiceNow   

  • Excellent analytical and problem-solving skills.  

  • Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight.  

  • Ability to learn and function in multiple capacities and learn quickly.  

  • Strong verbal and written communication skills   

Fulltime remote

Visual Connections, LLC offers a full benefits package including:

  • Full Medical, Dental, Prescription and Vision health care

  • 11 Paid Holidays annually

  • Paid time off

  • Short Term, Long Term Disability and Life Insurance

  • Employee Assistance Program (EAP)

Training and Development opportunities including professional certification and educational reimbursement

Visual Connections, LLC provides employment opportunities for all employees and applicants in accordance with applicable federal, state and local laws. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

We are a Service-Disabled, Veteran-Owned Small Business; and a Certified Maryland Business Enterprise. We were established in 2007 to provide public and private sector clients with robust web-based applications, Health IT and Portfolio and Program Management services. We have proven ourselves to be valuable partners who can deliver both qualitative and quantitative results to our clients. Our versatile, efficient and experienced team has a stellar record of past performance, working with the Department of Defense (DoD), Department of Health and Human Services (DHHS), Veterans Health Administration (VHA), Centers for Medicare and Medicaid Services (CMS),Centers for Disease Control and Prevention (CDC) and , Blue Cross Blue Shield (BCBS). With an employee base well versed in different disciplines, we are able to deliver high quality customizable solutions.