SOC Analyst IV

This is a fully remote position, open to applicants in District of Columbia.

📋 Description

• Deliver Tier III SOC assistance for the triage of security alerts, intricate incident inquiries, forensic analysis, and escalation of advanced security threats within federal enterprise environments.

• Examine security events, SIEM alerts, endpoint telemetry, network traffic, and threat intelligence to detect malicious activities, assess potential impacts, and suggest containment and remediation strategies.

• Sustain operational awareness of SOC security technologies, monitoring platforms, log sources, and telemetry to guarantee continuous visibility into the security posture of the enterprise and emerging threats.

• Conduct advanced technical investigations, correlate security events across various data sources, perform root cause analyses, and coordinate incident escalation and response activities with cybersecurity stakeholders.

• Oversee shift handovers, maintain incident documentation, and create, review, and update Standard Operating Procedures (SOPs), incident response playbooks, and operational workflows.

• Assist in Red Team and Purple Team exercises by assessing detection capabilities, analyzing simulated attack activities, identifying monitoring deficiencies, and recommending enhancements.

• Offer technical guidance and mentorship to junior SOC analysts and contribute to enhancements in threat detection, incident management, and SOC operational efficiency.

⛳️ Requirements

• A minimum of 6 years of progressive experience in Security Operations Center (SOC) operations, cybersecurity monitoring, threat detection, incident response, or related security fields, including advanced incident investigation and escalation duties.

• Must hold at least one of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), Certified Ethical Hacker (CEH), or CompTIA Security+.

• Proven hands-on experience with SIEM platforms, security event correlation, endpoint detection and response (EDR) technologies, endpoint telemetry analysis, and advanced security alert investigations in enterprise settings.

• Strong technical expertise in Windows and Linux operating systems, network protocols, enterprise networking, and AWS-native security features, including experience in investigating security events across both on-premises and cloud environments.

• Established capability to conduct intricate security investigations, analyze potential indicators of compromise (IOCs), document technical findings, implement incident escalation procedures, and convey actionable security recommendations to technical teams and federal stakeholders.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance coverage.

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and continuous education.

• Flexible working hours and remote work options.

• Generous paid time off and holiday leave.