Cyber Security Analyst, SOC Tier 2
Overview
You will own threat detection and incident response for critical infrastructure, monitoring and mitigating attacks in real time as a Tier 2 SOC analyst. You will join a security operations team using state-of-the-art tools to analyze logs, investigate alerts, and escalate incidents. You will work with intelligence sources to identify patterns and stop attackers, directly impacting mission success. This role offers hands-on experience in threat assessment and incident response, with clear paths for growth.
What You'll Do8
- 1Monitor and analyze security alerts using SIEM platforms and ESS tools.
- 2Investigate security events by reviewing logs, tool output, and threat intelligence.
- 3Escalate incidents following established processes and communicate findings to stakeholders.
- 4Identify and recommend improvements to detection and response capabilities.
- 5Prepare reports and documentation to support incident analysis and remediation.
- 6Collaborate with team members to understand, mitigate, and respond to threats, restoring operations and limiting impact.
- 7Analyze incidents to determine the scope of affected systems and assist recovery efforts.
- 8Combine threat intelligence, event data, and assessments to identify attacker patterns and goals.
Requirements6
- 1Top Secret clearance required
- 2Experience with DoD information systems
- 3Ability to support 24/7 operations via shift work
- 4HS diploma or GED
- 5DoD 8570 IAT Level II Certification
- 6CSSP Analyst Certification
Salary Insight
Salary not disclosed in listing
Similar open positions
Explore active roles that match your skills and interests.
MANTECH
VerifiedCyber Security Analyst, Incident Response & SOC
You will own security event correlation and incident triage across enterprise networks, detecting and responding to threats in real time. You will work within a 24x7 SOC team, analyzing alerts from Windows and Linux systems and coordinating remediation. You hold IAT Level II certification (Security+ or equivalent) and thrive in high-stakes environments. This role offers direct exposure to COTS security tools and a clear path to advanced cyber roles.
SPAHR SOLUTIONS GROUP LLC
VerifiedCyber Security Operations Jr Analyst
Lead 24x7x365 cybersecurity monitoring and threat detection for DTRA's enterprise network. Work shift nights weekends and holidays. Must be SCI eligible Top Secret clearance. Collaborate with CSSP analysts engineers and agency stakeholders to protect national security interests.
00100 LEIDOS, INC.
VerifiedSOC Analyst, Incident Response & Threat Detection
You will own threat detection and incident response for customer networks at Leidos' Digital sector in Alexandria, VA. With 2+ years of SOC experience, you will triage alerts from endpoints, IDS/IPS, NetFlow, and custom sensors, and perform intermediate-level log analysis. You will work shift rotations in a 24/7 mission-essential environment, supporting a team that protects critical infrastructure. This role moves beyond monitoring: you will document findings, craft incident reports, and grow into senior-level investigations. Expect to work weekends and in bad weather, with an active Top Secret clearance and ability to obtain SCI.
SAIC
VerifiedCyber Defense Analyst SAIC Washington DC
SAIC seeks a Cyber Defense Analyst on a joint Contractor Government Cyber Protection Team at Fort Meade Maryland. This full-time day shift role requires on-site presence 10 percent of the time. Candidates must hold a TS.SCI_wPoly clearance and possess relevant technical expertise.
System One
VerifiedMid-Level Cybersecurity Incident Response Analyst
Own security alert investigation and response at scale. Deliver actionable insights within 90 days. Differentiate through proactive threat hunting and cross-functional collaboration.
AGR LLC
VerifiedMid-Level Cyber Defense Analyst
Lead a comprehensive cyber defense effort supporting government agencies in Washington DC. Own incident response and threat mitigation initiatives at a high level. Drive continuous improvement of security posture across cloud and on-premises environments.