Security Operations Center Analyst

Booz Allen Hamilton • Hampton, VA

86d • $69,300 - $158,000

About The Position

As a security operations center (SOC) analyst, you're in the middle of the action, responding to and mitigating threats in real time. You're the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a Tier 2 or 3 SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber attacks for the Air Force. We are seeking an experienced SOC analyst to join our SOC team. In this role, you will be responsible for investigating security incidents, analyzing threats, and coordinating response efforts. You will serve as an escalation point for Tier 1 analysts and play a key role in improving our security posture by enhancing detection, response, and remediation capabilities. You'll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You'll guide efforts to figure out just how many systems are affected and assist recovery efforts. You'll combine threat intelligence, event data, and assessments from recent events, and identify patterns to understand attackers' goals to stop them from succeeding. This is a great opportunity to hone your cyber security skills with hands-on experience in threat assessment and incident response.

Requirements

• 4+ years of experience in a SOC, incident response, or cybersecurity role.
• Experience in analyzing logs, network traffic, digital forensics, malware analysis, threat intelligence, and cyber security.
• Experience with incident response frameworks, such as NIST or MITRE ATT&CK.
• Knowledge of cyber kill chain methodologies.
• Knowledge of SIEM, such as Elastic, QRadar, or Sentinel, EDR, such as CrowdStrike or Microsoft Defender, IDS, and IPS.
• Ability to work under pressure, prioritize, and deliver results.
• Secret clearance.
• Bachelor's degree in Cybersecurity or Information Technology and 5+ years of experience in Cybersecurity, or 12+ years of experience in Cybersecurity in lieu of a degree.
• Two or more security certifications, such as GCIH, GCIA, CEH, or CISSP.

Nice To Haves

• 1+ years of experience with scripting and automation, such as Python or PowerShell.
• Possession of strong analytical, problem-solving, and communication skills.

Responsibilities

• Investigate security incidents and analyze threats.
• Coordinate response efforts and serve as an escalation point for Tier 1 analysts.
• Enhance detection, response, and remediation capabilities.
• Understand, mitigate, and respond to threats quickly.
• Restore operations and limit the impact of security incidents.
• Guide recovery efforts and assess the number of affected systems.
• Combine threat intelligence, event data, and assessments to identify patterns.

Benefits

• Health, life, and disability insurance.
• Financial and retirement benefits.
• Paid leave and professional development.
• Tuition assistance and work-life programs.
• Dependent care support.
• Recognition awards program for exceptional performance.

What This Job Offers

• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees