SOC Analyst

Entarian•Denver, CO

1d•Hybrid

About The Position

Position is contingent upon contract award and funding. Entarian is seeking an experienced Security Operations Center (SOC) Analyst to support cybersecurity monitoring, threat detection, incident response, and continuous monitoring activities for mission-critical information systems. The SOC Analyst is responsible for monitoring security events, analyzing alerts, tuning Security Information and Event Management (SIEM) platforms, and supporting Continuous Monitoring (ConMon) operations to maintain the security posture of enterprise and mission systems. This role works closely with ISSOs, ISSMs, ISSEs, system administrators, and network engineers to identify, investigate, and respond to cybersecurity events. The ideal candidate will have demonstrated experience supporting Department of Defense or federal cybersecurity operations involving space systems, mission operations, communications networks, cloud environments, or enterprise IT capabilities.

Requirements

Active Top Secret security clearance with SCI eligibility.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related technical discipline. Equivalent experience may be considered.
Minimum three (3) years of experience supporting Security Operations Center (SOC) or cybersecurity operations.
Experience with SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, QRadar, or similar technologies.
Experience analyzing security events, investigating incidents, and performing log analysis.
Experience supporting Continuous Monitoring (ConMon) and vulnerability management activities.
Familiarity with NIST RMF, incident response processes, and cybersecurity best practices.
DoD 8140 (or legacy DoD 8570) compliant certification such as Security+, CySA+, GSEC, SSCP, or equivalent.
Strong analytical, troubleshooting, and communication skills.
Proficiency with Microsoft Office Suite, including Word, Power-Point, Excel, and Outlook.
Ability to travel approximately 25% to support customer locations and operational activities.

Nice To Haves

Experience supporting DoD, Intelligence Community, U.S. Space Force, or other federal cybersecurity operations.
Experience supporting AWS GovCloud, Azure Government, or hybrid cloud security monitoring.
Experience with SOAR platforms, endpoint detection and response (EDR), and threat intelligence tools.
Experience performing threat hunting, malware analysis, or digital forensics.
Familiarity with MITRE ATT&CK, Zero Trust Architecture, and DISA cybersecurity guidance.
Experience supporting classified environments and mission-critical operations.
Certifications such as CySA+, GCIA, GCIH, CISSP, or equivalent.
Experience supporting mission operations, SATCOM, or enterprise network environments.

Responsibilities

Monitor enterprise security events and analyze alerts using SIEM and cybersecurity monitoring tools.
Investigate, triage, and respond to cybersecurity incidents in accordance with established procedures.
Configure and tune SIEM rules, alerts, dashboards, and correlation logic to improve threat detection and reduce false positives.
Support Continuous Monitoring (ConMon) activities, including security event analysis, compliance monitoring, and reporting.
Perform log analysis, threat hunting, and forensic data collection to identify potential security threats and vulnerabilities.
Coordinate incident response activities with cybersecurity, engineering, and operations teams.
Support vulnerability management by reviewing scan results and tracking remediation activities.
Document security incidents, findings, and response actions in accordance with program and customer requirements.
Develop and maintain SOC procedures, playbooks, and operational documentation.
Prepare security reports, metrics, and briefings for program leadership and government stakeholders.