TS SCI w/ CI Poly Cleared SOC Analyst

Our client, a leader in the HCM space, is seeking a SOC Analyst for a long-term contract with a strong likelihood of extension. This individual will be working a primarily onsite schedule out of Reston, VA and will be responsible for investigating advanced security alerts, responding to incidents, and helping protect enterprise and federal cloud environments. The SOC Analyst II will work closely with security operations and incident response teams to analyze threats, improve detection capabilities, and strengthen overall SOC operations.

Responsibilities

Investigating advanced security alerts; Responding to incidents; Helping protect enterprise and federal cloud environments; Working closely with security operations and incident response teams to analyze threats; Improving detection capabilities; Strengthening overall SOC operations

Requirements

Active TS/SCI with CI Polygraph; 5+ years of experience in Security Operations, Cybersecurity, Incident Response, or Security Monitoring; Experience monitoring and securing AWS or cloud-based environments; Hands-on experience with Splunk, including log analysis and advanced search/query development; Experience investigating endpoint, network, and cloud security events; Strong understanding of incident response processes and security investigations; Experience performing root cause analysis and validating security incidents; Experience documenting incidents and communicating findings to technical stakeholders; Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience; US based resources eligible for work in the US or US Citizens traveling abroad

Nice to have

Familiarity with the MITRE ATT&CK Framework; Experience with SOAR platforms such as Tines or similar automation tools; Experience supporting federal, DoD, or Intelligence Community environments; Experience with Endpoint Detection & Response (EDR) platforms; Experience with SIEM detection engineering, use case tuning, or reducing false positives; DoD 8570 IAT Level II certification (Security+, CySA+, GSEC, or equivalent)

Benefits

Excellent benefits and compensation packages