> Markdown version of [/jobs/ext/1862949-soc-analyst](https://www.wearedevelopers.com/jobs/ext/1862949-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Analyst

- **Company:** cFocus Software Incorporated
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cloud Computing, Cloud Computing Security, Cyber Security, Linux, Monitoring of Systems, Intrusion Detection Systems, Network Monitoring, Security Information and Event Management, In-Plane Switching (IPS), Mitre Att&ck, Information Technology, Cybercrime, 3-tier Architectures
- **Published:** July 1, 2026
- **Apply:** http://cfocussoftware.applytojob.com/apply/jobs/details/S141jqkA9l

## About the Role

* Public Trust Clearance
 * B.S. Computer Science, Information Technology, or a related field
 * Minimum 2 years of Security Operations Center (SOC) or cybersecurity monitoring experience.
 * Experience monitoring enterprise security environments.
 * Experience investigating cybersecurity incidents.
 * Knowledge of SIEM platforms and security monitoring technologies.
 * Understanding of NIST SP 800-61 Computer Security Incident Handling Guide.
 * Knowledge of MITRE ATT&CK Framework.
 * Ability to obtain and maintain NIH suitability/background investigation.

## Description

cFocus Software seeks a SOC Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance., * Continuously monitor enterprise security systems and Security Operations Center (SOC) dashboards.

 * Analyze security alerts generated by SIEM, IDS/IPS, EDR, cloud security, and network monitoring platforms.
 * Identify indicators of compromise (IOCs) and suspicious activity.
 * Correlate security events across multiple technologies to identify potential cyber threats.
 * Monitor Windows, Linux, cloud, network, and endpoint environments for malicious activity.
 * Perform initial incident triage and classification.
 * Analyze security events to determine severity, scope, impact, and priority.
 * Validate potential security incidents and reduce false positives.
 * Escalate confirmed incidents to Tier 2 and Tier 3 Incident Response personnel.
 * Maintain incident tickets throughout the incident lifecycle.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)