Security Operations Center Analyst

About RISCPoint Advisory Group
RISCPoint was founded with the vision to seamlessly integrate with your team, utilizing only high performing professionals with deep technical and operational experience to fulfill your security and compliance needs. Our diverse team has served companies ranging from the Fortune 10 to pre Series A startups. Our first priority is to understand your specific needs, only recommending services we are certain will deliver a meaningful return on investment. We provide business focused risk, technology, and cybersecurity solutions, specifically tailored to your organization.
Position Overview
RISCPoint is seeking a Security Operations Center (SOC) Analyst to support and maintain the ongoing security and compliance posture of FedRAMP authorized information systems through continuous monitoring, vulnerability management, and security operations.
In this role, you will proactively identify, analyze, and respond to security events and incidents, perform regular vulnerability assessments and remediation tracking, and ensure system configurations, controls, and documentation remain aligned with FedRAMP, NIST, and organizational security requirements.
You will collaborate with engineering, compliance, and operations teams to validate control effectiveness, support audit and assessment activities, and maintain accurate security documentation, including SSP updates, POA&M management, and risk reporting. This position plays a critical role in safeguarding federal data, ensuring regulatory compliance, and strengthening the resilience and security maturity of authorized cloud environments.
Key Responsibilities
Security Operations
Utilize and maintain automated security tooling for monitoring and response within customer environments
Participate in an on call rotation to provide rapid response to potential security incidents
Manage incident response notifications and communications
Conduct routine vulnerability assessments and provide remediation guidance
Continuous Monitoring
Perform weekly vulnerability scans using approved scanning tools
Analyze vulnerability scan results and coordinate remediation efforts
Monitor security alerts from SIEM, IDS/IPS, and other security tools
Track security metrics and maintain compliance dashboards
Maintain FedRAMP Continuous Monitoring compliance, including Cloud Security Posture Management (CSPM)
Provide 24/7 on call support as needed
Compliance & Reporting
Conduct quarterly threat hunting exercises
Assist with monthly ConMon reporting deliverables
Maintain Plan of Action & Milestones (POA&M) documentation
Support 3PAO assessments and audits
Security Tools Management
Configure and maintain security monitoring platforms
Tune security tools to reduce false positives
Develop custom detection rules and alerts
Create security dashboards and reports
Qualifications
Experience
2 to 4 years in security operations, incident response, or a SOC analyst role
1 to 2 years working in AWS, particularly AWS GovCloud
Experience with vulnerability management and remediation
Hands on experience with SIEM platforms and security monitoring tools
Experience analyzing security logs and investigating incidents
Certifications
Required: Security+ or equivalent DoD 8570 IAT Level II certification
Preferred: ISC2 CISSP or CCSP, or GIAC GCIH
Preferred: AWS Certified Security Specialty or AWS Certified Solutions Architect Associate
Technical Skills
Vulnerability Scanning: Tenable Nessus, Qualys, Rapid7, or similar
SIEM Platforms: Google SecOps, Splunk ES, Microsoft Sentinel, or similar
IDS/IPS: Suricata, Zeek, Snort
Cloud Security: AWS GuardDuty, AWS Security Hub, CloudTrail, VPC Flow Logs, AWS IAM
Endpoint Security: CrowdStrike, Carbon Black, Microsoft Defender
Incident Response: IR frameworks such as NIST SP 800-61
Compliance: NIST SP 800-53 Rev. 5 controls, FedRAMP
Scripting, Automation & IaC: Python, Ansible, AWS CLI, Terraform
Compensation & Benefits
Competitive base salary plus bonus
Company paid health, dental, and vision insurance
401(k) with 3% company contribution (Traditional and Roth options)
Generous vacation policy

Work arrangement
Yes