Security Operations Center (SOC) Analyst

Leidos • Shiloh, IL

3d • Onsite

About The Position

We are seeking proactive defenders for a critical role safeguarding the nation's most sensitive digital landscapes. As a Security Operations Center (SOC) Analyst on our 24x7 front-line security operations team, you will be directly responsible for defending mission environments against the world's sophisticated and persistent cyber threats. This role demands exceptional critical thinking, a deep-seated adversary mindset, and a self-motivated drive to excel in a high-stakes mission. Multiple Openings for SOC Analyst Level I & Level II.

Requirements

• Must have an active DoD Top Secret security clearance.
• SOC Experience: Understanding of the operational flow, high tempo demands, and rigorous standards of a 24x7 Security Operations Center, particularly those operating at the highest classification levels.
• Critical Thinking & Adversary Mindset: Ability to look beyond the surface of an alert to uncover the TTPs of advanced persistent threats (APTs). Excels at correlating disparate data points, analyzing raw packet data, and conducting deep-dive investigations of complex security events.
• Demonstrated Self-Motivation: Self-starter who takes active ownership of professional development, driving growth to stay ahead of the adversary.
• Thrives on Change: High operational adaptability, viewing unexpected shifts as opportunities to excel, and seamlessly pivoting to adopt new processes, security tools, and analytical methodologies.
• Level I: Bachelor's degree and 2+ years of relevant experience (Equivalent professional work or military experience will be considered in lieu of a degree).
• Level II: Bachelor's degree and 4+ years of relevant experience (Equivalent professional work or military experience will be considered in lieu of a degree).
• Baseline Certification: Current DoD 8570 IAT Level II (or higher) certification, such as CompTIA Security+ CE, ISC2 SSCP, or SANS GSEC (or equivalent 8140 requirements).
• Specialized Certification: Ability to obtain a DoD 8570 CSSP-Analyst level certification (e.g., CEH, CySA+, GCIA, or equivalent) within 180 days of hire.
• Technical Core: Solid foundation in networking principles, including packet analysis, common ports/protocols, traffic flow, the OSI model, and defense-in-depth architecture.
• Location: Commutable distance (within 2 hours) or ability to self-relocate to Scott AFB, IL.

Nice To Haves

• Prior experience working within a TS/SCI operational environment, DISA, or other specialized DoD agencies.
• Experience applying intelligence-driven defense strategies utilizing the MITRE ATT&CK or Cyber Kill Chain frameworks against known APT intrusion sets.
• In-depth experience utilizing SIEM/SOAR platforms to perform behavioral and statistical analysis across multiple log types within a classified network.
• Knowledge or experience in defending classified cloud environments (e.g., AWS Secret/Top Secret, Azure Government Secret/Top Secret).
• Basic scripting and programming skills (e.g., Python, PowerShell) to automate routine analytical tasks.

Responsibilities

• Conduct investigation and triage of security alerts from endpoints, IDS/IPS, NetFlow, and custom sensors to identify and neutralize threats within our mission spaces.
• Perform deep-dive analysis of extensive, highly-classified log files, pivoting between disparate datasets and correlating evidence to support complex incident investigations against nation-state actors.
• Produce detailed technical findings and reports for high-level stakeholders, documenting adversary tactics, techniques, and procedures (TTPs).
• Integrate and operationalize highly-classified threat intelligence feeds and Indicators of Compromise (IOCs) into security sensors and SIEM platforms.
• Collaborate closely with specialized incident response teams and ensure timely, precise communication of security incidents to mission partners.

Benefits

• Predictable Work-Life Balance: Five-day, 8-hour shift structure.
• Shift Options to Fit Your Lifestyle: Day Shift: 8:00 AM - 4:00 PM, Swing Shift: 4:00 PM - 12:00 AM, Mid Shift: 12:00 AM - 8:00 AM.
• Flexibility: Efforts to honor shift preferences whenever possible.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level