Security Operations Center Analyst, Senior

Booz Allen Hamilton•Fort Meade, MD

1d•$99,000 - $225,000•Remote

About The Position

The Security Operations Center Analyst, Senior role is an advanced cybersecurity analyst position focused on threat hunting, complex investigations, and identifying subtle malicious activity. The analyst will work within a 24x7 Security Operations Center (SOC) to protect critical systems for global trade and supply chain operations. As a Tier III SOC Analyst and Shift Lead, the role combines deep technical expertise with operational leadership. Responsibilities include hunting for advanced threats, leading complex incident investigations, analyzing suspicious activity, and enhancing detection capabilities using tools like Microsoft Sentinel and KQL. The analyst will also lead SOC operations during their assigned shift, acting as the senior technical escalation point for other analysts, ensuring effective incident investigation, prioritization, communication, and handoffs. Collaboration will occur across cybersecurity, cloud, network, and operational technology environments, working directly with technical SMEs and client stakeholders. This role offers the chance to apply advanced cybersecurity skills to a mission where cyber resilience is crucial for operational continuity and global commerce. The ideal candidate will think like an adversary, lead through complex situations, communicate clearly, and contribute to the continuous improvement of threat detection and response.

Requirements

8+ years of experience with cybersecurity including SOC operations, incident response, threat hunting, or detection engineering
Experience with Microsoft Sentinel and KQL
Experience with SIEM detection engineering, tuning, and security investigations
Experience with scripting languages such as Python
Experience providing technical leadership or mentoring cybersecurity analysts
Knowledge of malware analysis, digital forensics, networking, and cloud security concepts
Knowledge of MITRE ATT&CK, NIST SP 800-53, and NIST SP 800-82
Ability to communicate technical findings to technical and non-technical stakeholders
Secret clearance
HS diploma or GED

Nice To Haves

Experience supporting critical infrastructure, operational technology, or industrial control system environments
Experience with Red Canary or comparable MDR capabilities
Microsoft Certification such as Security Operations Analyst Associate, GCIH, GSOC, GICSP, GRID, GCIA, CCNA, or CISSP Certification

Responsibilities

Hunt for advanced threats.
Lead complex incident investigations.
Analyze suspicious activity.
Continuously improve detection capabilities using Microsoft Sentinel, KQL, threat intelligence, and other security technologies.
Lead SOC operations during assigned shifts.
Serve as the senior technical escalation point for other analysts.
Ensure incidents are effectively investigated, prioritized, communicated, and handed off between teams.
Work across cybersecurity, cloud, network, and operational technology environments.
Collaborate directly with technical SMEs and client stakeholders.