Security Analyst - XDR - Mid Level

First Information Technology Services • Arlington, VA

6h • $115,000 - $135,000 • Onsite

About The Position

The Mid Security Analyst – XDR supports extended detection and response (XDR) operations for state and local government customers in a highly regulated environment. This role performs independent investigation and analysis of security alerts and incidents, validates detections, and provides escalation guidance and response recommendations within defined operational procedures.
Mid-level analysts are expected to apply sound judgment during investigations and perform deeper investigative and exploratory analysis, including pivoting beyond initial alerts to identify related or previously undetected activity. The role also supports service onboarding activities and participates in limited external stakeholder communications as a technical contributor.
This is an on-site, shift-based role within a 24x7x365 security operations model and contributes to operational quality, consistency, and continuity across shifts.

Requirements

• S. citizenship and ability to obtain CJIS access upon hire, including background check and fingerprinting
• 3+ years of experience in security operations, incident analysis, or a related cybersecurity role
• Hands-on experience investigating security alerts using XDR and/or modern SIEM/SOAR platforms
• Ability to independently analyze incidents and make escalation or response recommendations
• Strong written documentation and communication skills

Nice To Haves

• Exposure to cloud-based security platforms, particularly Microsoft cloud environments
• Working knowledge of attacker techniques, common alert patterns, and false positives
• Experience using query languages such as KQL to support investigations
• Prior experience mentoring or supporting junior analysts during investigations
• Progress toward or attainment of a security-focused certification

Responsibilities

• Independently investigate and analyze security alerts and incidents using XDR and SIEM tooling
• Perform deeper investigative and exploratory analysis, including pivoting beyond initial alerts to validate scope, impact, or related activity
• Provide response recommendations and escalation guidance in accordance with defined procedures
• Support and guide junior analysts during investigations, including quality review of alert handling and documentation
• Participate as a technical contributor in customer onboarding activities and limited external stakeholder communications
• Document investigation findings clearly and contribute to identification of detection gaps, trends, or service improvement opportunities

Benefits

• FITS proudly invests in benefits for its employees, covering 100% of health, dental, and vision coverage for employees and their dependents (including domestic partners), matching 401(K), short/long term disability, life insurance, and parental leave.
• Paid time off accrues at a starting rate of 15 days/year, increasing with tenure.
• Employees working for clients in Washington state have 10 paid holidays.
• FITS also provides up to $5,000 annually for professional development, including reimbursement of job-related training classes, seminars, tuition, and certification expenses.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed