Security Operations Center Analyst

Newport News, VA (Hybrid – 2 Days a Week Remote) Qualifications 5+ years of SOC, Cyber Defense, Incident Response, or Security Operations experience Experience serving as a Tier III SOC Analyst, Incident Response Lead, Cyber Operations Lead, or senior escalation resource Advanced incident response experience including containment, eradication, recovery, and post-incident analysis Experience conducting threat hunting and root cause investigations across endpoint, network, cloud, and identity platforms Hands-on experience with SIEM technologies such as Splunk, Chronicle, Exabeam, Sentinel, or similar platforms Experience utilizing SOAR technologies such as XSOAR or similar automation and orchestration tools Strong understanding of attack frameworks, adversary tactics, indicators of compromise, and detection methodologies Experience supporting enterprise-scale investigations involving Microsoft 365, cloud services, endpoint security, and identity management technologies Scripting or automation experience using Python, PowerShell, or similar technologies Ability to mentor Tier I and Tier II analysts and provide technical guidance during active investigations Security+, CySA+, GCIH, GCIA, GCFA, CEH, or similar cybersecurity certifications Experience supporting DoD, federal, defense industrial base, or highly regulated environments Familiarity with Zero Trust architectures and cybersecurity modernization initiatives Experience supporting CMMC, NIST 800-171, RMF, or related compliance frameworks Active Secret Clearance or recent clearance eligibility – preferred Experience with threat intelligence integration, detection engineering, or advanced security analytics Experience supporting large enterprise SOC operations with 24x7 monitoring environments #J-18808-Ljbffr