• In this role, you will work directly on Red Team activities. • Plan and execute Red Team exercises, offensive validations, and attack simulations. • Assess exposure of environments, identities, applications, networks, endpoints, and cloud. • Safely exploit vulnerabilities in a controlled manner, documenting attack paths and impacts. • Support the Blue Team and CSIRT with inputs to improve detections, playbooks, and controls. • Produce technical reports with evidence, risk analysis, recommendations, and prioritization. • Re-validate fixes and support tracking of mitigation plans. • Contribute to the methodology, ethics, security, and governance of offensive activities.

• Assess vulnerabilities in applications, APIs, libraries, components, and pipelines. • Support squads in remediating vulnerabilities and adopting secure development practices. • Operate and enhance SAST, DAST, and SCA tools, API security solutions, and bot protection. • Support vulnerability management by prioritizing risks based on criticality and exposure. • Perform technical risk analyses of applications, integrations, and digital user journeys. • Contribute to secure development standards, technical guides, checklists, and training. • Support automation, shift-left initiatives, and continuous security improvements across the SDLC.

Role Description Everforth ECS is seeking a SOC Analyst II to work Remotely. Please Note: This position is contingent upon contract award. - Performs SOC Tier 1–3 continuous monitoring of SIEM, SOAR, EDR, IAM, DLP, vulnerability management, and other automated security platforms. - Conducts triage, threat analysis, threat hunting, correlation, enrichment, risk mitigation, and incident response activities. - Documents investigations and artifacts in accordance with IRS and DHS reporting requirements and supports insider threat program and forensic collection. - Collaborates with senior analysts and incident response teams to mitigate risks, enhance security monitoring capabilities, and improve the organization's security posture. Qualifications - Bachelors’ Degree in Cybersecurity, IT, or related field. - 3+ years of SOC experience. - IRS CI - IRS High Risk Clearance. - Knowledge of SIEM, SOAR, EDR, DLP, IAM/PAM tools. - Experience with incident response, threat intelligence, threat hunting, triage, and investigation. - Understanding of federal incident reporting (NIST 800-53, FISMA, IRM 10.8, DHS/Treasury requirements). - Ability to document cases and perform forensic support.

• Monitor and triage alerts from security tools (SIEM, EDR/XDR, firewalls, email security, cloud security platforms) • Conduct initial investigation and documentation of potential security incidents and escalate as needed • Assist with identity and access management tasks, including user provisioning, access reviews, and MFA/SSO support • Support vulnerability scanning cycles and help track remediation progress • Perform routine security checks to ensure tools and controls are functioning as expected • Assist with researching new threats, vulnerabilities, and security best practices • Support security awareness initiatives and phishing simulation programs • Participate in security incident response activities under guidance from senior staff • Assist in maintaining security documentation, policies, procedures, and reports • Collaborate with IT teams and the MSSP to resolve security-related tickets and inquiries • Support configuration and tuning of existing security solutions under supervision • Work closely with our Managed Security Services Provider (MSSP) and IT teams to review alerts and investigate security incidents • 24/7 Availability for Identity & Access Management, Security Incident Response and Escalation • Performs other related job duties, as assigned