Security Operations Center (SOC) Analyst

What you'll do

• Perform advanced analysis of cybersecurity events escalated from Tier 1 analysts or identified through enterprise monitoring.
• Correlate security telemetry and technical data to determine the scope, severity, and impact of suspicious activity.
• Distinguish between legitimate activities, false positives, policy violations, and potential cyber incidents.
• Execute containment and mitigation actions for identified threats based on approved SOC playbooks.
• Preserve technical evidence and documentation required for investigation and incident response.
• Perform Tier 2 troubleshooting of cybersecurity tools, alerts, and related technical issues.
• Identify detection gaps and recommend improvements to monitoring capabilities and alert tuning.
• Contribute to the development of SOC procedures, playbooks, and process improvements based on operational experience.

What we're looking for

• U.S. Citizenship is required.
• An active Secret security clearance is required at the time of consideration.
• A Bachelor's degree in a technical field or equivalent experience and training is required.
• 5 or more years of relevant cybersecurity experience is required.
• Experience performing cyber defense, incident triage, SOC operations, or security monitoring is required.
• Experience using enterprise security-analysis tools and performing Tier 2 troubleshooting is required.
• Experience supporting Department of Defense or Federal Security Operations Centers is preferred.
• Familiarity with Risk Management Framework processes and SIEM platforms is preferred.