Cloud SOC Analyst

Booz Allen Hamilton•San Antonio, TX

12h•Remote

About The Position

Booz Allen has an opportunity to showcase your talents by supporting the United States Air Force. Cloud threats move faster than traditional security operations—and organizations increasingly rely on resilient, intelligence-driven cloud defenses. As a Security Operations Center (SOC) Analyst on our team, you’ll monitor and analyze threats, using state-of-the-art tools. You’ll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You’ll analyze incidents to figure out just how many systems are affected and assist recovery efforts. You’ll combine threat intelligence, event data, and assessments from recent events, and identify patterns to understand attackers’ goals to stop them from succeeding. You should thrive in a fast-paced environment, be able to translate customer needs, and assist others in migration and solutioning of mission critical capabilities. Work with us as we secure our client from malicious actors. Join us. The world can’t wait.

Requirements

4+ years of experience as part of a SOC operations or cybersecurity team within cloud or hybrid environments.
3+ years of experience with cloud SIEM or SOAR platforms, such as Splunk, and multi-cloud telemetry pipelines.
Experience with incident response tasks, such as step identification within the IR process, remediation of security incidents that could have potential impact, and ongoing investigations.
Knowledge of basic IT forensics.
Secret clearance.
Bachelor's degree.
Ability to obtain a DoD 8570 IAT II Certification, including Security+, within 60 days of start date.

Nice To Haves

Experience designing or hardening cloud environments across AWS, Azure, OCI, and GCP.
Experience with cloud automation, such as IaC, serverless security controls, or automated response pipelines.
Experience with vulnerability management and dynamic or static code analysis.
Top Secret clearance.
CISSP, CCSP, GCIH, or cloud security equivalent certification.

Responsibilities

Monitor and analyze threats using state-of-the-art tools.
Understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact.
Analyze incidents to determine the number of affected systems and assist recovery efforts.
Combine threat intelligence, event data, and assessments from recent events to identify patterns and understand attackers' goals.
Assist others in migration and solutioning of mission critical capabilities.