> Markdown version of [/jobs/ext/4515915-security-operations-center-analyst](https://www.wearedevelopers.com/jobs/ext/4515915-security-operations-center-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Operations Center Analyst

- **Company:** The Apex
- **Location:** Los Angeles, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Bash Shell, Cyber Security, Linux, Intrusion Detection and Prevention, Python (Programming Language), Networking Basics, Windows PowerShell, Cloud Services, Anti-Phishing, Security Information and Event Management, Software Vulnerability Management, Data Logging, Apex Code, Scripting, Mitre Att&ck, Cybercrime
- **Published:** November 1, 2026
- **Apply:** https://startup.jobs/security-operations-center-analyst-top-secret-clearance-apex-technology-inc-10083999

## About the Role

Active TS/SCI clearance required at time of hire

 - US Citizenship required
 - 2 or more years of experience in a SOC, incident response, threat detection, endpoint security, vulnerability management, or another hands-on cybersecurity operations role
 - Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry
 - Working knowledge of Windows and Linux, authentication, endpoint behavior, networking fundamentals, common attacker techniques, and cloud logging
 - Ability to write useful search queries and filters in a SIEM or log-analysis platform and document investigations so another analyst can continue the work
 - Understanding of incident triage, scoping, containment, evidence preservation, escalation, vulnerability prioritization, and post-incident remediation, Experience with CrowdStrike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra ID, AWS security telemetry, or similar tools
 - Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, PowerShell, or Bash
 - Security+, CySA+, GCIH, GCIA, or a comparable security operations certification
-Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments, Apex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here.

## Description

Apex is looking for a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will spend most of your time working directly with alerts, logs, vulnerabilities, and investigations to determine what happened and what needs to happen next., Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.

 - Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
 - Escalate incidents based on affected systems, severity, and CUI impact.
 - Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure.
 - Document incidents, required resolutions, and potentially affected assets.
 - Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting.