Cyber Defense - SOC Analyst (US Federal)

Workday • McLean, VA

1d • Hybrid

About The Position

This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native). The SOC Analyst is responsible for 24x7 security monitoring, alert triage, and initial investigation of security events. You will analyze alerts generated by SIEM tools such as Splunk and other integrated security platforms, determine impact, and escalate when necessary. You will follow established playbooks and procedures while developing investigative skills and technical depth. This role is ideal for someone early in their SOC career who demonstrates strong analytical thinking and a desire to grow in cybersecurity operations.

Requirements

• This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance. An active TS/SCI w/CI Poly is preferred
• 2+ years of experience in IT, cybersecurity, or related technical field
• Experience working with SIEM tools such as Splunk
• Understanding of basic networking concepts (TCP/IP, DNS, HTTP/S)
• Familiarity with Windows and Linux operating systems
• Associate’s or Bachelor’s degree in Cybersecurity, IT, or equivalent experience

Nice To Haves

• Strong analytical and critical thinking skills
• Ability to triage alerts and distinguish false positives from real threats
• Familiarity with common attack techniques such as phishing and malware
• Experience documenting investigations clearly and concisely
• Team-oriented mindset with willingness to learn from senior analysts
• Basic understanding of incident response lifecycle
• Certifications meeting DoD 8570 requirements

Responsibilities

• 24x7 security monitoring
• Alert triage
• Initial investigation of security events
• Analyze alerts generated by SIEM tools such as Splunk and other integrated security platforms
• Determine impact
• Escalate when necessary
• Follow established playbooks and procedures
• Developing investigative skills and technical depth

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree