> Markdown version of [/jobs/ext/736506-csoc-tier-2-analyst](https://www.wearedevelopers.com/jobs/ext/736506-csoc-tier-2-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CSOC Tier 2 Analyst - **Company:** C AND S.E. NGINEERING INC - **Location:** Rockville, MD, United States - **Experience:** Expert - **Salary:** $85,000.0 - $95,000.0 - **Contract:** Permanent contract - **Skills:** ARM Architecture, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Digital Content, Issue Tracking Systems, Reverse Engineering, Software Vulnerability Management, Cyber Threat Analysis, Forescout, Information Technology, Cybercrime, Fireeye, Cortex XSOAR Platform, 3-tier Architectures, Encase, Splunk - **Published:** June 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=19140af0365e6d44 ## About the Role Do you have experience in Vulnerability management?, Do you have a Bachelor's degree?, * Bachelors in information technology, Computer Science, or a related field; or relevant, commensurate work experience. * 5+ years of experience within a Level Tier 2 cybersecurity environment; experience in a leadership role is preferred. * Robust Certification Portfolio including Security+, Network+, CEH, Azure or Cloud Certification, and Splunk Core Certified Power User. * Ability to work a day or night shift rotational schedule. * Vulnerability/cyber incident management framework. * Experience with advanced technologies such as: Splunk SaaS, Splunk Enterprise Security, Splunk SaaS UBA, Crowdstrike, Tenable, Forescout, zScaler, Bigfix, MaaS-360 (IBM MaaS-360), and Encase for forensic investigations, Fireeye, Cortex XSOAR, Cortex XDR, and Prisma-Access. * Prior HHS experience a plus. * Must be a US Citizen. ## Description CSEngineering is looking to add a CSOC Tier 2 Analyst to our growing team! As the Cyber Security Operations Center (CSOC) Tier 2 Team Lead, you are responsible for overseeing and managing the activities of the Tier 2 Team in our client's Security Operations Center. Your role involves leading a team of security analysts and engineers who monitor, detect, analyze, and respond to security incidents and threats in an organization's IT environment at the Tier 2 Level. You play a critical role in analyzing and resolving cyber threats or escalating incidents for Tier 3 response as necessary. Leadership skills, technical expertise, and a deep understanding of cybersecurity concepts are essential for success in this role., * Respond promptly and effectively to security incidents and threats discovered by CSOC Analyst Level I and carry out effective Level II analysis of incidents. * Remediation of incidents and escalation when necessary to Tier 3 support * Initial assessment of the scope of the attack and affected systems * Accurately document cases during investigations and effectively communicate findings to Level I Analyst or escalation team to ensure complete handover of work streams. * Continuously improve incident management processes through periodic threat hunting exercises, knowledge optimization effort building, and by comprehensive diagnosis and analysis of incident trends. * Follow the issue tracking, escalation policies and work effectively across all CSOC tiers as the technical competence requires. * Dedicated monitoring and analysis of cyber security events by use of SOC tools * Incident Response generation and reporting IAW established procedures. * Provide Level II technical support in CSOC operations and activities. * Provide daily/weekly updates on CSOC operations and developments. * Conduct Forensic analysis and respond to data call activities. * Generate quality technical reports containing methodologies, findings, and recommendations. * Work with external stakeholders to understand operational needs and develop effective processes. * Maintain a current understanding of industry trends, emerging cyber threats, and new solutions which may impact CSOC activities. * Collaborate with CSOC SME to ensure optimal performance using CSOC technology. * Identify, reverse engineering and de-obfuscating digital content related to an incident. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)