NOSC Tier 1 Specialist

Sev1Tech is looking for a Network Operations and Security Center (NOSC) Tier 1 Specialist to play an integral role on a large enterprise IT government program providing network, cybersecurity, cloud operations, and engineering support services with a significant focus to provide IT security and public safety. 

The Network Operations and Security Center (NOSC) Tier 1 Specialist will accomplish the following but are not limited to:

• Monitor network, security, system, and cloud environments for events and perform triage analysis to identify or prevent incidents; perform network, security, system, and cloud incident response as needed
• Respond to incidents by collecting, analyzing, preserving digital evidence, and ensure that incidents are recorded and tracked in accordance with NOSC requirements
• Work closely with other teams to assess and provide recommendations for reducing operational risks.
• Maintain records of monitoring and incident response activities, utilizing case management and ticketing technologies such as ServiceNow
• Perform monitoring and analysis using Splunk or other analytics tools
• Monitor dashboards for malicious events, phishing events, spoofing events, DDoS attacks, SQL Injection events, network connectivity events, system/device performance events, and other potentially high-risk incidents
• Recognize intrusion attempts and compromises through reviews and analyses of relevant event detail and summary information
• Recommend changes to SOPs and related documentation
• Generate end-of-shift reports for documentation and knowledge transfer to subsequent analysts on-duty
• Log all incident details and prioritization codes
• Provide "touch level" Tier 1 support, including WAN/LAN connectivity, routers, firewalls, and security
• Support remote access platforms such as VPN and Terminal Services
• Assign unresolved incidents to higher Tier support or internet service providers and product vendors to coordinate restoration of service and obtain the necessary information for recording/tracking the outage or degradation of service
• Keep component NOCs and SOCs informed of their incident's status at agreed intervals and continuously update incidents as needed
• Notify Government Leads and other stakeholders of high impact/priority failures using the appropriate escalation procedures

• Bachelor's degree in Computer Science, Information Technology, Cyber Security or equivalent education required; additional professional IT experience can we considered in lieu of a degree

• Minimum two (2) years of experience working in a NOC, SOC, or NOSC environment with Splunk and or other logging, monitoring, and dashboard systems
• Strong interpersonal skills and prior professional IT services experience in a 24x7 operations enterprise environment
• Background in incident response, operations and threat intelligence
• Willing to work in a 24x7x365 operations center environment; may be expected to work some holidays and allow for flexible scheduling
• On-site presence may be required for this role
• Able to provide proof of U.S. Citizenship in order to obtain a Dept of Homeland (DHS) EOD (Entrance on Duty) clearance; Active DHS EOD preferred

• Knowledge in incident response, vulnerability management, security intelligence, automation/ scripting and/or the operations of advanced networking and security tools
• Ability to handle multiple competing priorities in a fast-paced and high-pressure environment
• Ability to work effectively with technical and non-technical business users
• Desirable certifications include but not limited to: CompTIA Security+, CCNA, SANs GSEC, GCIH, and/or GCIA EC Council C|EH

Founded in 2010, Sev1Tech provides IT, engineering, and program management solutions delivery. Sev1Tech focuses on providing program and IT support services to critical missions across Federal and Commercial Clients. Our Mission is to Build better companies. Enable better government. Protect our nation. Build better humans across the country.

Join the Sev1Tech family where you can achieve great accomplishments while fostering a satisfying and rewarding career progression. Please apply directly through the website at: https://www.sev1tech.com/careers/current-openings/#/ #joinSev1tech

For any additional questions or to submit any referrals, please contact: troy.ester@sev1tech.com

Sev1Tech is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.