NOSC Analyst (Active TS/SCI w/CI Poly Required)

A&M Technologies, Inc. (A&M) is a minority-owned small business established in 2014, specializing in providing expert Federal IT support and management services. Our comprehensive offerings include systems integration, IT security, continuity of business operations support, IT infrastructure planning, enterprise resource planning (ERP) systems support, business process automation, cloud migration, software engineering, systems engineering, and IT project management.
At A&M, we take pride in our diverse and high-performing team. With unwavering dedication and commitment to our customers' success, our practitioners bring unparalleled expertise to every project. Through our collaborative "one-team" approach and technical prowess, we excel in assisting our clients in overcoming their most complex IT challenges.

We are seeking NOSC Analysts with 5+ years of relevant experience to join our team. This position is located in Herndon, VA and requires an Active Top Secret Clearance with the ability to obtain/maintain SCI and CI polygraph.  

Key Responsibilities 

• Support the maintenance of a Network Operations and Security Center (NOSC), conducting continuous monitoring, incident response, and threat hunting activities
• Work closely and cross-train with co-located NOC analysts to provide relevant artifacts and analysis in order to assist with troubleshooting network transport-related incidents
• Assist Program Management staff with prioritization and milestone tracking for efforts related to SOC and NOC Operations and Maturity governance
• Manage the Security Information and Event Management (SIEM) platform to monitor for error conditions and security alerts, and coordinate vulnerability assessments and artifact collection across the enterprise
• Evaluate network structures and device configurations for security risks, offering recommendations based on best practices, and gather data to identify and respond to network intrusions
• Analyze network traffic (both cloud and on-prem) and system logs to identify error conditions, malicious activities, exploited vulnerabilities, and attack methods; develop processes to enhance SOC and NOC response and efficiency
• Conduct comprehensive technical analyses of computer evidence, research and integrate new security tools into the SOC, and synthesize findings into clear reports for both technical and non-technical audiences, in accordance with established policies, procedures, and applicable regulations
• Perform attack reconstruction based on network traffic analysis, integrate threat intelligence, and apply familiarity with the MITRE ATT&CK framework; collaborate effectively across multiple locations

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related technology field
• 5+ years of experience in security operations, with demonstrated leadership in customer-facing roles
• CASP+, Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or other relevant certification qualifying under DoDM 8140.03 AIM/AIT Level III
• Proficient in analyzing cyber-attacks, with a deep understanding of attack classifications, stages, and system/application vulnerabilities, while ensuring compliance with Department of Defense (DoD) policies and procedures
• Extensive knowledge of network topologies and protocols (e.g., TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB), with hands-on experience using tools and systems such as:
  • AWS, Cisco, Splunk SIEM, Splunk Forwarders
  • IDS/IPS, VMware, SSL Decryption
  • Proxy and DLP operations
  • Windows and Linux-based endpoints
• Strong understanding of Threat Intelligence integration across multiple layers of the enterprise

Compensation & Benefits Highlights

• Target Salary Range: $140,000 - $160,000 
• Competitive salary and benefits package
• Employee referral bonuses of up to $10,000 for eligible hires
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth

Health & Wellness

• Comprehensive medical, dental, and vision coverage for employees and eligible dependents
• Deductible reimbursement of up to $1,000 for employee-only coverage and up to $2,000 for family coverage upon meeting plan deductibles

Income Protection

• 100% company-paid short-term disability insurance
• 100% company-paid long-term disability insurance
• 100% company-paid accidental death and dismemberment (AD&D) insurance
• Company-paid life insurance coverage up to $150,000

Retirement

• 401(k) plan with immediate vesting upon eligibility. Employees become eligible after six months of service
• Pre-tax and Roth contribution options available
• Company Match: A&M provides a dollar-for-dollar match on employee contributions up to 6% of eligible compensation
• Non-Elective Contribution (NEC): A&M provides an additional 6% company contribution to all eligible participants, regardless of employee contributions

Paid Time Off

• Up to 18 days of flexible paid time off (PTO)
• Additional PTO awarded based on years of service: +2 days after 3 years, +4 days after 6 years, and +7 days after 10 years
• 10 paid holidays annually, including up to four floating holidays

Work-Life Balance

• Flexible work schedules, including flex time and compressed work schedules, based on contract and project requirements