Senior SOC Operations Analyst (DoD TS Clearance)

MartinFed • Huntsville, AL

18h • Onsite

About The Position

MartinFed is hiring a Senior SOC Operations Analyst to join its Watch-Floor Operations team in Huntsville. The role supports cyber defense and national security through real-time monitoring, threat detection, investigation, and response across enterprise networks. The analyst works in a secure, fast-paced operations center and supports deployable Incident Response Teams. The position involves 24/7 rotational shift work, including nights, weekends, and holidays as needed, and extended computer use and sitting.

Requirements

• U.S. citizenship and a DoD Top Secret clearance.
• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• At least 8 years of experience in cybersecurity or related IT roles.
• Proficiency in Splunk Enterprise Security.
• Strong understanding of incident response, threat hunting, and vulnerability management.
• At least three of the following certifications: GIAC Continuous Monitoring (GMON), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), or GIAC Network Forensic Analyst (GNFA).
• Ability to work 24/7 rotational shifts, including nights, weekends, and holidays as needed.
• Ability to work at a computer for long periods and potentially sit at a desk for extended periods.

Nice To Haves

• Proficiency with Microsoft Sentinel.
• Hands-on experience with threat intelligence platforms and malware analysis.
• Familiarity with scripting and automation tools.
• Strong interpersonal, communication, and reporting skills.

Responsibilities

• Continuously monitor enterprise networks using SIEM tools such as Splunk Enterprise Security and Microsoft Sentinel.
• Analyze and investigate cybersecurity incidents, including alerts, vulnerabilities, and breaches.
• Conduct forensic analysis and incident handling using validated methodologies.
• Document incidents and assessments, and contribute to after-action reports and remediation strategies.
• Assist with penetration testing and vulnerability assessments.
• Maintain and fine-tune security tools, including firewalls, IDS/IPS, and data encryption technologies.
• Provide input on best practices and security policy improvements.
• Support real-time cyber defense operations alongside deployable Incident Response Teams (IRTs).
• Create forensically sound duplicates of evidence, conduct dynamic analysis using timelines, signatures, and statistical methods, and deliver actionable intelligence.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior