Darktrace has more than 2,500 employees located globally. Founded by mathematicians and cyber defence experts in 2013, Darktrace is a global leader in cyber security AI, delivering complete AI-powered solutions in its mission to free the world of cyber disruption.
For over a decade, Darktrace has pioneered a proactive, AI-native approach to security. Our roots lie deep in innovation. The Darktrace AI Research Centre based in Cambridge, UK, has conducted research establishing new thresholds in cybersecurity, with technology innovations backed by over 200 patents and pending applications.
Today, Darktrace is a global leader in cybersecurity AI, delivering the essential cybersecurity platform to protect organisations today and for an ever-changing future.
We are seeking a Federal Security Operations Center (SOC) Analyst to join our talented security team. This role is perfect for a motivated individual with a passion for cybersecurity, critical thinking, and problem-solving. The ideal candidate will have at least 3 years of relevant experience as a SOC analyst, strong technical skills, and the ability to work effectively in a team. The primary function of this position is to participate with identification, investigations and reporting on cyber threats, building runbooks and assisting with developing a functional SOC program.
Key Responsibilities:
- Usage of the Darktrace suite of products, as well as FEDRAMP approved EDR/NDR/XDR, vulnerability scanning, and SIEM security tooling.
- Monitor and analyze alerts to identify security issues for investigation, remediation and post-incident learning of events and incidents.
- Collaborate with senior analysts and security engineers to develop and implement effective security strategies.
- Assist in the creation and maintenance of runbooks and Standard Operating Procedures.
- Participate in on-call shifts as needed to ensure 24/7 coverage of security operations.
- Investigate, document, and report on information security issues and emerging trends.
- Stay updated with the latest cybersecurity trends, threats, and technology.
- US Citizenship is required, and the candidate must be able to obtain a security clearance.
Qualifications:
- At least 3 years of relevant experience in an internal SOC.
- CompTIA Security+, Certified Ethical Hacker and similar certifications are required.
- Familiarity using Vulnerability Management, SIEM, Endpoint Security tools such as Splunk, Microsoft Defender, Nessus, and Trend Micro.
- Experience coordinating incident response efforts, assisting with classifying security events, support documentation and reporting deliverables.
- Strong critical thinking and problem-solving skills.
- Excellent communication skills; written and verbal.
- Ability to work in a team-oriented environment and collaborate with others.
- Fast learner with the ability to adapt to new challenges and technologies quickly.
- Hardworking and dedicated to continuous improvement.
- Availability for on-call shifts as required.
Preferred Skills:
- Experience in a Security Operations Center (SOC) environment working as an Incident Responder/Coordinator or analyst.
- Knowledge of network security, endpoint security, and threat intelligence.
- Experience in compliance, government and data and privacy is a plus.
- Proactive and enthusiastic about cybersecurity with ability to work independently
Benefits
- 100% medical, dental and vision insurance, plus dependents
- Paid parental leave
- Pet insurance
- Life insurance
- Commuter benefits
- Employee Assistance Program
#LI-hybrid
