SOC Analyst
Peraton · UNAVAILABLE, UNAVAILABLE, US
About this role
## SOC Analyst ### Responsibilities - Monitor and investigate security alerts; perform threat hunting and notify designated managers, incident responders, and cybersecurity service provider personnel of suspected incidents. - Clearly articulate event history, status, and potential impact in accordance with the organization’s cyber incident response plan. - Analyze and characterize network traffic to identify anomalous activity and potential threats. - Create advanced ad hoc **SPL** queries. - Coordinate with internal and external teams to investigate threats, assess risks, and conduct forensic analysis. - Review and analyze log files from multiple sources (host logs, network traffic logs, firewall logs, IDS logs) to identify potential security threats. - Use **SIEM** and **EDR** tools to monitor the operational environment. - Develop and document configuration standards, policies, and procedures to operate, manage, and secure system infrastructure. - Advise management and team members on technology risks and recommend mitigation strategies. - Engage with multiple levels of management, providing technical expertise and thought leadership. - Prepare reports detailing investigations, incidents, and other security-related activities. - Identify and classify attack tactics and techniques. - Recommend and implement enhancements to improve system performance, security, and reliability. - Build and refine SOC processes and procedures (including documenting work in SOPs). - Train and mentor junior SOC team members. - Plan and execute SOC-related projects and initiatives. - Communicate clearly and professionally; demonstrate flexibility and willingness to take on additional responsibilities. ### Core Work Schedule - **Third shift:** 11:00 PM – 7:30 AM EST, **Thursday – Monday** ### Location - **Fully remote**, with preference for candidates local to the **Washington, DC (DMV)** area for occasional onsite meetings, training, or customer support. - Onsite requirements may change based on government/program needs (e.g., surge support may require up to five days per week onsite). - Onsite location may include the Washington, DC customer site or the Peraton office in **Sterling, VA**. ### Qualifications (Basic) - **Bachelor’s degree + 2 years** experience, **or** **Associate’s degree + 4 years** experience, **or** **High School diploma/equivalent + 6 years** experience. - **U.S. citizenship** and an **active SECRET security clearance**. - **2+ years** of cybersecurity, SOC, or systems security experience in a **federal government environment** supporting business-critical, high-availability systems. - **2+ years** of SOC or cybersecurity-related experience. - Experience with a **SIEM** platform, preferably **Splunk**. - Experience using **Splunk dashboards** and **Microsoft Sentinel** for security monitoring and analysis. - Experience querying and analyzing security data using **SPL** (working understanding of data types, conditions, and related concepts).
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.