> Markdown version of [/jobs/ext/4707399-soc-analyst-junior](https://www.wearedevelopers.com/jobs/ext/4707399-soc-analyst-junior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SOC Analyst (Junior) - **Company:** NTT DATA Corporation - **Location:** Springfield, VA, United States - **Experience:** Starter - **Salary:** $87,428 - $131,142 - **Contract:** Permanent contract - **Skills:** Microsoft Antivirus, Cloud Computing Security, CompTIA Security+, Cyber Security, Monitoring of Systems, Intrusion Detection Systems, Anti-Phishing, Security Information and Event Management, Mitre Att&ck, Firewalls (Computer Science), Cyber Warfare, Splunk, Servicenow - **Published:** November 13, 2026 - **Apply:** https://careers-inc.nttdata.com/talentcommunity/apply/1450271100/?locale=en_US ## About the Role * Minimum 4 years of SOC, cyber defense, security monitoring, or incident triage experience. * Active cybersecurity certification such as CompTIA Security+ CE, CompTIA CySA+, GIAC GSEC, or GIAC GCIH (or another credential validated against the assigned 8140 work role). * Ability to work on-site in Springfield, VA, including rotating shifts, nights, weekends, and federal holidays as needed to support 24x7x365 operations. * Active Top Secret Security Clearance Preferred Qualifications: * Familiarity with Splunk or comparable SIEM, Microsoft Defender, EDR, firewalls, IDS/IPS, phishing analysis, and MITRE ATT&CK. * Experience supporting government SOCs, sensitive/classified enclaves, or enterprise incident ticketing (e.g., ServiceNow). * Clear written and verbal communication, accurate ticket documentation, adherence to standard operating procedures, and effective coordination during time-sensitive incidents. ## Description Join a mission-critical cybersecurity team responsible for protecting our client's enterprise IT environment. In this role, you'll help monitor and analyze security events, identify potential threats, and support incident response efforts across complex federal networks and systems. You'll gain hands-on experience with enterprise security monitoring technologies while contributing directly to the protection of systems supporting national security and homeland security missions. Provide first-tier cybersecurity monitoring, event review, alert triage, and initial incident response to protect mission-critical government networks and systems., * Monitor SIEM, endpoint, network, email, and cloud security alerts; identify suspicious activity and distinguish false positives from actionable events. * Perform Tier 1 investigation and initial incident response using approved playbooks; document indicators, evidence, impact, timeline, and actions. * Analyze basic event logs, traffic patterns, and user-reported security events; correlate findings across approved tools and dashboards. * Create, update, classify, and escalate security incident tickets within established response timelines and shift handoff procedures. * Communicate significant incidents to Tier 2 analysts and watch leadership; contribute to operational reporting and situational awareness. * Follow evidence handling, data protection, and classified-system procedures; maintain accurate knowledge-base and SOP contributions.