SOC Analyst

This role centers on identifying, investigating, and mitigating cybersecurity incidents within complex, enterprise-scale environments. The analyst will address advanced security challenges by applying modern defensive techniques and contributing to the continuous improvement of monitoring, detection, and response practices. The position requires a high level of autonomy, strong analytical judgment, and the ability to develop effective solutions under pressure. In addition to hands-on operational responsibilities, the role includes mentoring peers, providing technical leadership, and helping evolve incident response workflows and security operations methodologies., Detect, analyze, and respond to security incidents affecting enterprise systems and networks Investigate suspicious activity, validate alerts, and determine root cause, scope, and impact of incidents Apply structured incident response processes to contain, eradicate, and recover from cyber events Leverage threat intelligence, behavioral indicators, and adversary tradecraft to identify advanced threats Utilize security monitoring platforms and data-driven analysis tools to support detection and response efforts Contribute to the refinement of SOC processes, detection strategies, and response playbooks Support environment hardening and preventive measures to reduce incident recurrence Provide technical guidance, peer mentoring, and operational leadership within the security operations team Communicate findings, risks, and recommendations clearly to technical teams and leadership audiences

3+ years of experience supporting enterprise IT, cybersecurity, or intelligence-focused technical environments (Senior roles require 7+ years) Experience operating within or supporting a Computer Incident Response Team, cyber operations group, or Security Operations Center Familiarity with intelligence-driven defense models and adversary behavior analysis frameworks Strong understanding of incident response lifecycle, SOC best practices, and operational security standards Hands-on experience using security monitoring, log analysis, or security information management platforms Knowledge of intrusion campaigns, threat actor tactics, techniques, and procedures Active Top Secret security clearance Bachelor’s degree required

Preferred Experience

Experience using cloud-native or extensible security analytics platforms Experience performing security monitoring and analysis with centralized log and event tools Active TS/SCI eligibility Industry certifications related to incident response, threat detection, or digital forensics, such as:

Continuous monitoring Incident handling Intrusion analysis Network or cloud forensics