Cyber Defense - SOC Analyst (US Federal)
About The Position
The SOC Analyst supports one or more direct or indirect contracts with the U.S. Federal Government. Due to federal security requirements, Workday personnel assigned to these contracts must be U.S. citizens, whether naturalized or native. The role may require a security clearance at the TS/SCI with CI Poly level; applicants must be able to obtain and maintain a U.S. government-issued security clearance, and an active TS/SCI with CI Poly is preferred. The analyst performs 24x7 security monitoring, alert triage, and initial investigation of security events. They analyze alerts generated by SIEM tools such as Splunk and other integrated security platforms, determine impact, and escalate when necessary. They follow established playbooks and procedures while developing investigative skills and technical depth. This role is suited to someone early in a SOC career with strong analytical thinking and an interest in growing in cybersecurity operations. The role may require on-site work at client locations in the DC, Maryland, and Virginia area. The position uses Workday Flex Work: teams spend at least half of their time each quarter in the office or in the field with customers, prospects, and partners, depending on role. Compensation may include eligibility for the Workday Bonus Plan or a role-specific commission or bonus, as well as annual refresh stock grants.
Requirements
- At least 2 years of experience in IT, cybersecurity, or a related technical field.
- Experience working with SIEM tools such as Splunk.
- Understanding of basic networking concepts, including TCP/IP, DNS, and HTTP/S.
- Familiarity with Windows and Linux operating systems.
- Associate’s or Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
- Strong analytical and critical-thinking skills.
- Ability to triage alerts and distinguish false positives from real threats.
- Familiarity with common attack techniques such as phishing and malware.
- Experience documenting investigations clearly and concisely.
- Team-oriented mindset and willingness to learn from senior analysts.
- Ability to obtain and maintain a U.S. government-issued security clearance.
- U.S. citizenship (naturalized or native) is required for personnel working on the federal contracts.
Nice To Haves
- Active TS/SCI with CI Poly security clearance.
- DoD 8570/8140 compliance with at least IAT Level II certification, including a current Computing Environment (CE) credential and one approved specialty certification, such as CompTIA CySA+, GICSP, or CASP+.
Responsibilities
- Perform 24x7 security monitoring, alert triage, and initial investigation of security events.
- Analyze alerts generated by SIEM tools such as Splunk and other integrated security platforms.
- Determine the impact of security alerts and escalate when necessary.
- Follow established playbooks and procedures.
- Document investigations clearly and concisely.
Benefits
- May be eligible for the Workday Bonus Plan or a role-specific commission or bonus.
- May be eligible for annual refresh stock grants.
- Flexible work schedule under Workday Flex Work.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
Associate degree
