Cyber Defense - SOC Analyst (US Federal)

Workday • Reston, VA

6d • $117,800 - $210,000 • Hybrid

About The Position

The SOC Analyst supports one or more direct or indirect contracts with the U.S. Federal Government. Due to federal security requirements, personnel working on these contracts must be U.S. citizens, whether naturalized or native. The role is responsible for 24x7 security monitoring, alert triage, and initial investigation of security events. The analyst reviews alerts from SIEM tools such as Splunk and other integrated security platforms, assesses potential impact, and escalates when necessary. The work follows established playbooks and procedures while developing investigative skills and technical depth, and is suited to someone early in a SOC career with strong analytical thinking and an interest in cybersecurity operations. The role may require on-site work at client locations in the DC, Maryland, and Virginia area. A security clearance at the TS/SCI with CI Poly level may be required; applicants must be able to obtain and maintain a U.S. government-issued clearance, and an active TS/SCI with CI Poly is preferred.

Requirements

• At least 2 years of experience in IT, cybersecurity, or a related technical field.
• Experience working with SIEM tools such as Splunk.
• Understanding of basic networking concepts, including TCP/IP, DNS, and HTTP/S.
• Familiarity with Windows and Linux operating systems.
• Associate’s or Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• Strong analytical and critical-thinking skills.
• Ability to triage alerts and distinguish false positives from real threats.
• Familiarity with common attack techniques such as phishing and malware.
• Experience documenting investigations clearly and concisely.
• Team-oriented mindset and willingness to learn from senior analysts.
• Basic understanding of the incident response lifecycle.
• Must be a U.S. citizen (naturalized or native) to work on the relevant federal contracts.
• Must be able to obtain and maintain a U.S. government-issued security clearance; a TS/SCI with CI Poly may be required.

Nice To Haves

• Active TS/SCI with CI Poly security clearance.
• DoD 8570/8140 compliance with at least IAT Level II certification, including a current Computing Environment (CE) credential and one approved specialty certification, such as CompTIA CySA+, GICSP, or CASP+.

Responsibilities

• Conduct 24x7 security monitoring.
• Triage and initially investigate security events.
• Analyze alerts generated by SIEM tools such as Splunk and other integrated security platforms.
• Determine the impact of alerts and escalate when necessary.
• Follow established playbooks and procedures.
• Document investigations clearly and concisely.

Benefits

• May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
• May be eligible for annual refresh stock grants.
• Workday comprehensive benefits are referenced, but specific benefits are not detailed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree