Security Operations Center Cyber Analyst

Arcfield Overview: Arcfield was purpose-built to relentlessly protect the nation and its allies from today’s national security threats. We have nearly 70 years of proven expertise and excel in space superiority, hypersonic defense and nuclear deterrence, digital transformation, and surface and undersea warfare domains. Our solution areas include space mission engineering, atmospheric science, digital engineering, mission assurance, and advances in modeling and simulation that together with our enterprise-wide adoption of artificial intelligence and machine learning, lead to better systems and timely, reliable decision-making. Headquartered in Chantilly, VA with 18 North American offices, Arcfield employs 2,200 engineers, scientists, analysts, IT specialists and other professionals who challenge the status quo to deliver an efficient technological advantage to our national security and defense partners. Responsibilities:

• Monitor and analyze security events in Splunk and Airlock Digital. Analyst on Duty: Investigate alerts that are triggered in the Splunk Console to determine if a threat or normal activity is allowed in the environment.
• Provide threat detection and incident response to mitigate risks to the Network
• Security Detection Engineering: troubleshoot, improve and develop security detection analytics. able to determine detection gaps and draft analytics to correct them
• Experience in interpreting activity to determine what is malicious vs expected from a variety of sources such as Windows and Linux workstations and servers, Firewall, Switch, Router, Endpoint Security, Wireless Intrusion Detection, and other security and application logs Proficiency in scripting languages (PowerShell, Python, Bash, etc.)

Qualifications:

• BS 2-4 Years, MS 0-2
  6+ Years experience in Security Operations Center processes and using SIEM and XDR tools

• Security Operations Center Analyst: Understand and respond to security detections in a SIEM adhering to Incident Response Processes. Ability to collect relevant information from network and host logs, correlate events together to develop incident timelines and deduce root cause. Collaborate with ISSOs and engineers/developers/admins to resolve security incidents

• Strong background in Security Compliance & Vulnerability Management. Familiarity with adhering to Cybersecurity Standard Operating Procedures, ability to review and update SOP documents for clarity and accuracy.

• Prior experience with deploying enterprise tools on Domain Computers, including Antivirus, endpoint protection, and vulnerability scanning

• Proficient in Active Directory (AD) & Domain Controller (DC) Administration

• Knowledge of Windows Server Administration, including Windows Server 2019/2022/2025 internals, registry, event logs, and system services

• Experience with Windows security baselines (CIS, DISA STIG)

• CompTIA Security+ CE

• Active Secret DoD Security Clearance required for this role

Equal Pay Act: This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections. Min: $64,252.03 Max: $111,721.81 EEO Statement:

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.