Qureos Mentor

ShorePoint

<div>Who we are: 
ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a &ldquo;work hard, play hard&rdquo; mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. 
The Perks: 
As recognized members of the Cyber Elite, we work together in partnership to defend our nation&rsquo;s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. 
Who we&rsquo;re looking for: 
We are seeking a SOC Level 2 Analyst for a potential opportunity to provide advanced monitoring, triage and response within a 24/7 Security Operations Center (SOC) environment. This role plays a key part in identifying and investigating security incidents, advising on mitigation and improving monitoring content and procedures. The SOC Level 2 Analyst will have hands-on experience with security technologies and be ready to contribute to threat detection, content development and continuous service improvement in a fast-paced operational setting. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. Employment for this position is dependent on the successful award of the contract. 
What you&rsquo;ll be doing: 
<ul>
<li>
Monitor client sources of potential security incidents, health alerts with monitored solutions and requests for information. This includes the monitoring of real-time channels or dashboards, periodic reports, email inboxes, helpdesk or other ticketing systems, telephone calls and chat sessions.</li>
<li>Follow client and incident-specific procedures to perform triage of potential security incidents to validate and determine needed mitigation.</li>
<li>Escalate potential security incidents to client personnel, implement countermeasures in response to others and recommend operational improvements.</li>
<li>Keep accurate incident notes in the case management system.</li>
<li>Maintain awareness of the client&rsquo;s technology architecture, known weaknesses, the architecture of the security solutions used for monitoring, imminent and pervasive threats as identified by client threat intelligence and recent security incidents.</li>
<li>Provide advanced analysis of the results of the monitoring solutions, assess escalated outputs and alerts from Level 1 Analysts.</li>
<li>Perform web hunting for new patterns/activities.</li>
<li>Advise on content development and testing.</li>
<li>Provide advice and guidance on the response action plans for information risk events and incidents based on incident type and severity.</li>
<li>Ensure that all identified events are promptly validated and thoroughly investigated.</li>
<li>Provide end-to-end event analysis, incident detection and manage escalations using documented procedures.</li>
<li>Devise and document new procedures and runbooks/playbooks as directed.</li>
<li>Maintain monthly Service Level Agreements (SLAs).</li>
<li>Maintain compliance with processes, runbooks, templates and procedures-based experience and best practices.</li>
<li>Assist the Cyber Hunting team with advanced investigations as needed.</li>
<li>Provide malware analysis (executables, scripts, documents) to determine indicators of compromise and create signatures for future detection of similar samples.</li>
<li>Continuously improve the service by identifying and correcting issues or gaps in knowledge (analysis procedures, plays, client network models), false positive tuning, identifying and recommending new or updated tools, content, countermeasures, scripts, plug-ins, etc.</li>
<li>Perform peer reviews and consultations with Level 1 Analysts regarding potential security incidents.</li>
<li>Serve as a subject matter expert in at least one security-related area (e.g., specific malware solution, Python programming, etc.).</li>
<li>Provide shift status and metric reporting as well as support weekly operations calls.</li></ul> 


What you need to know: 
<ul>
<li>
Strong understanding of SOC operations, incident response workflows and monitoring tools.</li>
<li>Experience with malware behavior analysis and identification of indicators of compromise.</li>
<li>Familiarity with APT tactics, techniques and procedures.</li>
<li>Knowledge of security technologies such as SIEM, EDR, IDS/IPS and WAF.</li>
<li>Understanding of networking fundamentals, protocols (TCP/IP, DNS, HTTP) and infrastructure devices.</li>
<li>Awareness of security architecture principles and common defensive tools.</li></ul> 


Must have&rsquo;s: 
<ul>
<li>
Bachelor&rsquo;s degree.</li>
<li>2+ years of working in a SOC or similar security operations environment, including 1+ years of experience in security technologies such as:
<ul><li>Security Information and Event Management (SIEM).</li>
<li>IDS/IPS, DLP, Endpoint Detection and Response (EDR).</li>
<li>Web Application Firewall (WAF), anti-virus and sandboxing solutions.</li>
<li>Host- and network-based firewalls, threat intelligence platforms or penetration testing tools.</li>
</ul></li><li>One or more of the following certifications:
<ul><li>(ISC)2 Certified Information Security Professional (CISSP)</li>
<li>GIAC Certified Intrusion Analyst (GCIA)</li>
<li>GIAC Continuous Monitoring (GMON)</li>
<li>Certified Ethical Hacker (CEH) or equivalent.</li>
</ul></li><li>Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.</li>
<li>Must have the ability to work shifts on a rotating basis for 24/7 support of clients.</li>
<li>Travel up to 15%, on average, based on the work you do and the clients and industries/sectors you serve.</li>
<li>Applicants must currently hold and maintain an active DOE Q or equivalent DoD Top Secret clearance.</li></ul> 


Beneficial to have: 
<ul>
<li>
A strong desire to understand the what as well as the why and the how of security incidents.</li>
<li>Knowledge of Advanced Persistent Threats (APT) tactics, techniques and procedures.</li>
<li>Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.</li>
<li>Understanding of common network infrastructure devices such as routers and switches.</li>
<li>Understanding of basic networking protocols such as TCP/IP, DNS, HTTP.</li>
<li>Basic knowledge in system security architecture and security solutions.</li></ul> 


Where it&rsquo;s done: 
<ul>
<li>
Onsite (Las Vegas, NV).</li></ul></div>

SOC Level 2 Analyst (Q Clearance)

<div>Who we are: 
ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a &ldquo;work hard, play hard&rdquo; mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. 
The Perks: 
As recognized members of the Cyber Elite, we work together in partnership to defend our nation&rsquo;s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. 
Who we&rsquo;re looking for: 
We are seeking a Data &amp; Automation Engineer with experience supporting document scanning, classification and automation solutions within Microsoft 365 environments. This role supports the development of tools and processes to analyze, manage and migrate large volumes of documents across SharePoint and network file systems. The ideal Data &amp; Automation Engineer will have experience in Python and PowerShell scripting, with an interest in data processing, automation and emerging AI capabilities. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. 
What you&rsquo;ll be doing: 
<ul>
<li>
Support development of Python-based tools for document scanning, extraction and processing.</li>
<li>Assist in automating workflows using PowerShell and Microsoft 365 services.</li>
<li>Work with SharePoint Online libraries, metadata and document structures.</li>
<li>Contribute to data migration activities from file shares to SharePoint Online.</li>
<li>Help implement and test document classification and records management processes.</li>
<li>Analyze file metadata and content to support categorization and compliance efforts.</li>
<li>Collaborate with senior engineers on integrating AI services (e.g., Azure OpenAI).</li>
<li>Perform testing, validation and troubleshooting of automation pipelines.</li>
<li>Document scripts, processes and technical configurations.</li></ul> 


What you need to know: 
<ul>
<li>
Working knowledge of scripting concepts for automation, including Python and PowerShell, in support of data processing and workflow development.</li>
<li>Understanding of how documents, metadata and file structures are organized and managed within Microsoft 365 and SharePoint Online environments.</li>
<li>Familiarity with concepts related to document classification, data organization and migration across file systems and enterprise platforms.</li></ul> 


Must have&rsquo;s: 
<ul>
<li>
3+ years of relevant experience.</li>
<li>Bachelor's degree or Associate&rsquo;s degree plus two (2) years relevant experience OR High School Diploma/GED plus four (4) years relevant experience.</li>
<li>Experience with Python scripting.</li>
<li>Experience with PowerShell scripting.</li>
<li>Understanding of SharePoint Online and Microsoft 365 ecosystem.</li>
<li>Experience with data handling, file systems or data migration concepts.</li>
<li>Strong analytical and problem-solving skills.</li>
<li>Strong attention to detail and ability to work with large datasets.</li>
<li>Willingness to learn and grow in AI-enabled solutions.</li>
<li>Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.</li>
<li>Applicants must hold and maintain an active DOE Q or equivalent DoD Top Secret clearance.</li></ul> 


Beneficial to have: 
<ul>
<li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field.</li>
<li>Industry recognized certifications.</li>
<li>Knowledge of records management or information governance concepts.</li>
<li>Exposure to Azure services or cloud-based tools.</li>
<li>Experience working with structured and unstructured data.</li></ul> 


Where it&rsquo;s done: 
<ul>
<li>
Remote (Herndon, VA).</li></ul></div>

Data & Automation Engineer (Q Clearance)

Join ShorePoint and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

ShorePoint

About Company

SOC Level 2 Analyst (Q Clearance)

Data & Automation Engineer (Q Clearance)