Назад
Company hidden
4 дня назад

SOC Analyst IV (Cybersecurity)

120 000 - 140 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
SOC Analyst IV (Cybersecurity) (SIEM/Incident Response): Leading Tier III security operations for a large federal civilian agency, including complex alert triage, forensic investigations, threat detection, and incident response with an accent on MITRE ATT&CK, NIST SP 800-61, and endpoint, network, and cloud telemetry. Focus on solving advanced security incidents, improving detection logic and playbooks, mentoring SOC analysts, and automating operational workflows.

Location: Remote within close proximity to the National Capital Region in Virginia, United States. U.S. citizenship and the ability to obtain or maintain an active Public Trust 6c clearance are required.

Salary: $120,000–$140,000 per year

Company

hirify.global Federal is the federal segment of Everforth, delivering technology solutions in cybersecurity, data and AI, and enterprise transformation for defense, intelligence, and federal civilian agencies.

What you will do

  • Provide Tier III support for SIEM alert triage, forensic analysis, escalation, and high-priority security events.
  • Analyze endpoint, network, and cloud telemetry to investigate incidents and determine root causes.
  • Apply MITRE ATT&CK and support the NIST SP 800-61 incident response lifecycle.
  • Develop and improve detection logic, incident response playbooks, SOPs, shift handovers, and operational documentation.
  • Support Red Team and Purple Team exercises and collaborate with threat hunting, CTI, and security engineering teams.
  • Mentor Tier I and Tier II analysts and produce technical reports for technical teams and senior government officials.

Requirements

  • U.S. citizenship and residence within close proximity to the National Capital Region are required.
  • Active Public Trust 6c clearance or the ability to obtain and maintain one.
  • 6+ years of SOC experience with Tier III incident response, forensic analysis, and SIEM operations.
  • Experience with SIEM platforms, endpoint telemetry, operating systems, networking, and AWS security capabilities.
  • Strong knowledge of NIST SP 800-61 and practical experience applying MITRE ATT&CK during investigations.
  • GCIA, CEH, or CompTIA Security+ certification and strong written and verbal communication skills.

Nice to have

  • Certifications such as CISSP, GCFA, GREM, GSE, or AWS Cloud Practitioner and higher.
  • AWS GovCloud or Azure Government security operations experience.
  • Experience with federal cybersecurity frameworks, continuous monitoring, POA&M remediation, and large-scale federal programs.
  • SOAR, malware analysis, detection engineering, SIEM rule tuning, Python, or PowerShell experience.

Culture & Benefits

  • Mission-driven work supporting federal civilian agency cybersecurity operations.
  • Environment focused on delivery excellence, innovation, professional development, and high-performing teams.
  • Remote work arrangement within the specified National Capital Region proximity requirement.
  • Role is contingent upon contract award.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →