• Identify, record, and track risks, issues, non-conformities, and security action plans. • Support assessments of adherence to standards, internal policies, frameworks, and regulatory requirements. • Produce risk analyses, opinions, and reports for leadership, committees, and responsible areas. • Monitor deadlines, owners, evidence, and the effectiveness of mitigation plans. • Contribute to the improvement of the cyber risk management process and control governance. • Support internal and external audits, inspections, and regulatory requests. • Integrate information from incidents, vulnerabilities, third parties, IAM, AppSec, and architecture to provide a consolidated risk view. • Act proactively in initiatives (projects, technology changes, new products) by identifying security risks and proposing controls prior to production rollout. • Define, monitor, and report metrics that measure risk exposure and control effectiveness.

• In this role, you will work directly on Red Team activities. • Plan and execute Red Team exercises, offensive validations, and attack simulations. • Assess exposure of environments, identities, applications, networks, endpoints, and cloud. • Safely exploit vulnerabilities in a controlled manner, documenting attack paths and impacts. • Support the Blue Team and CSIRT with inputs to improve detections, playbooks, and controls. • Produce technical reports with evidence, risk analysis, recommendations, and prioritization. • Re-validate fixes and support tracking of mitigation plans. • Contribute to the methodology, ethics, security, and governance of offensive activities.

• Assess vulnerabilities in applications, APIs, libraries, components, and pipelines. • Support squads in remediating vulnerabilities and adopting secure development practices. • Operate and enhance SAST, DAST, and SCA tools, API security solutions, and bot protection. • Support vulnerability management by prioritizing risks based on criticality and exposure. • Perform technical risk analyses of applications, integrations, and digital user journeys. • Contribute to secure development standards, technical guides, checklists, and training. • Support automation, shift-left initiatives, and continuous security improvements across the SDLC.

Role Description Everforth ECS is seeking a SOC Analyst II to work Remotely. Please Note: This position is contingent upon contract award. - Performs SOC Tier 1–3 continuous monitoring of SIEM, SOAR, EDR, IAM, DLP, vulnerability management, and other automated security platforms. - Conducts triage, threat analysis, threat hunting, correlation, enrichment, risk mitigation, and incident response activities. - Documents investigations and artifacts in accordance with IRS and DHS reporting requirements and supports insider threat program and forensic collection. - Collaborates with senior analysts and incident response teams to mitigate risks, enhance security monitoring capabilities, and improve the organization's security posture. Qualifications - Bachelors’ Degree in Cybersecurity, IT, or related field. - 3+ years of SOC experience. - IRS CI - IRS High Risk Clearance. - Knowledge of SIEM, SOAR, EDR, DLP, IAM/PAM tools. - Experience with incident response, threat intelligence, threat hunting, triage, and investigation. - Understanding of federal incident reporting (NIST 800-53, FISMA, IRM 10.8, DHS/Treasury requirements). - Ability to document cases and perform forensic support.