> Markdown version of [/jobs/ext/2586173-security-operations-center-analyst](https://www.wearedevelopers.com/jobs/ext/2586173-security-operations-center-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Operations Center Analyst

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Columbia, MD, United States
- **Experience:** Expert
- **Salary:** $69,400.0 - $158,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Linux, Networking Basics, Security Information and Event Management, Snort (Software), Nessus, Firewall Services Module, Splunk
- **Published:** August 14, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88033809/1

## About the Role

* Experience with SIEM Fundamentals, including Splunk
 * Knowledge of basic networking fundamentals
 * Knowledge of the basic functions and configurations of Bro (Zeek)
 * Knowledge of Suricata or Snort
 * Ability to review Nessus scans and Firewall configurations
 * Ability to review Linux hosts for indicators of compromise and hardening of Linux systems
 * Ability to navigate *nix based systems via CLI
 * Ability to find, read, and analyze various logs
 * TS/SCI clearance with a polygraph
 * HS diploma or GED and 6+ years of experience with incident response procedures and analysis, or Bachelor's degree and 2+ years of experience with incident response procedures and analysis

Nice If You Have:

 * Experience with correlating threat intelligence (INTEL) to determine the threat actor, the attack's scope, and the affected systems
 * Experience with AI Fundamentals
 * Knowledge of Splunk Phantom or SOAR



## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 166: Sycophancy, Zip bombs and AI Native Development](https://www.wearedevelopers.com/magazine/585-dev-digest-166-sycophancy-zip-bombs-and-ai-native-development)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)