Senior SOC Operations Analyst (DoD TS Clearance)

MartinFed • Huntsville, AL

8d • Onsite

About The Position

MartinFed is hiring a highly skilled SOC Operations Analyst for its Watch-Floor Operations team in Huntsville. The role supports national security and critical infrastructure by monitoring, detecting, and responding to real-time cyber threats. The analyst performs continuous network monitoring, investigates incidents, conducts forensic analysis, supports vulnerability and penetration testing, maintains security tools, and works alongside deployable Incident Response Teams. The position is based in a fast-paced, secure operations center and requires 24/7 rotational shift work, including nights, weekends, and holidays as needed. Work involves extended periods at a computer and may include prolonged sitting. The environment can involve extreme deadline pressures.

Employment is contingent on passing a background check and drug screening before the start date. Random drug screenings may occur during employment. MartinFed is an E-Verify and Equal Opportunity/Affirmative Action Employer.

Requirements

• U.S. citizen with a DoD Top Secret clearance.
• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• Minimum of 8 years of experience in cybersecurity or related IT roles.
• Proficiency in Splunk Enterprise Security is required.
• Strong understanding of incident response, threat hunting, and vulnerability management.
• Must hold at least three of the following certifications: GIAC Continuous Monitoring (GMON), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), or GIAC Network Forensic Analyst (GNFA).

Nice To Haves

• Proficiency in Microsoft Sentinel.
• Hands-on experience with threat intelligence platforms and malware analysis.
• Familiarity with scripting and automation tools.
• Strong interpersonal, communication, and reporting skills.

Responsibilities

• Perform continuous monitoring of enterprise networks using SIEM tools such as Splunk Enterprise Security and Microsoft Sentinel.
• Analyze and investigate cybersecurity incidents, including alerts, vulnerabilities, and breaches.
• Conduct forensic analysis and incident handling using validated methodologies.
• Document incidents and assessments, and contribute to after-action reports and remediation strategies.
• Assist with penetration testing and vulnerability assessments.
• Maintain and fine-tune security tools, including firewalls, IDS/IPS, and data encryption technologies.
• Provide input on best practices and security policy improvements.
• Support real-time cyber defense operations alongside deployable Incident Response Teams (IRTs).
• Create forensically sound duplicates of evidence, conduct dynamic analysis (timeline, signature, and statistical), and deliver actionable intelligence.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior