4 дня назад
SOC Analyst IV (Cybersecurity)
120 000 - 140 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
SOC Analyst IV (Cybersecurity) (SIEM/Incident Response): Leading Tier III security operations for a large federal civilian agency, including complex alert triage, forensic investigations, threat detection, and incident response with an accent on MITRE ATT&CK, NIST SP 800-61, and endpoint, network, and cloud telemetry. Focus on solving advanced security incidents, improving detection logic and playbooks, mentoring SOC analysts, and automating operational workflows.
Location: Remote within close proximity to the National Capital Region in Virginia, United States. U.S. citizenship and the ability to obtain or maintain an active Public Trust 6c clearance are required.
Salary: $120,000–$140,000 per year
Company
Federal is the federal segment of Everforth, delivering technology solutions in cybersecurity, data and AI, and enterprise transformation for defense, intelligence, and federal civilian agencies.
What you will do
- Provide Tier III support for SIEM alert triage, forensic analysis, escalation, and high-priority security events.
- Analyze endpoint, network, and cloud telemetry to investigate incidents and determine root causes.
- Apply MITRE ATT&CK and support the NIST SP 800-61 incident response lifecycle.
- Develop and improve detection logic, incident response playbooks, SOPs, shift handovers, and operational documentation.
- Support Red Team and Purple Team exercises and collaborate with threat hunting, CTI, and security engineering teams.
- Mentor Tier I and Tier II analysts and produce technical reports for technical teams and senior government officials.
Requirements
- U.S. citizenship and residence within close proximity to the National Capital Region are required.
- Active Public Trust 6c clearance or the ability to obtain and maintain one.
- 6+ years of SOC experience with Tier III incident response, forensic analysis, and SIEM operations.
- Experience with SIEM platforms, endpoint telemetry, operating systems, networking, and AWS security capabilities.
- Strong knowledge of NIST SP 800-61 and practical experience applying MITRE ATT&CK during investigations.
- GCIA, CEH, or CompTIA Security+ certification and strong written and verbal communication skills.
Nice to have
- Certifications such as CISSP, GCFA, GREM, GSE, or AWS Cloud Practitioner and higher.
- AWS GovCloud or Azure Government security operations experience.
- Experience with federal cybersecurity frameworks, continuous monitoring, POA&M remediation, and large-scale federal programs.
- SOAR, malware analysis, detection engineering, SIEM rule tuning, Python, or PowerShell experience.
Culture & Benefits
- Mission-driven work supporting federal civilian agency cybersecurity operations.
- Environment focused on delivery excellence, innovation, professional development, and high-performing teams.
- Remote work arrangement within the specified National Capital Region proximity requirement.
- Role is contingent upon contract award.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
5 дней назад
Senior Security Analyst (Cybersecurity)
128 000 - 192 000CHF
7 дней назад
Security Operations Engineer (AI)
91 200 - 118 600$
9 дней назад
Security Analyst II: Gaurdian (Cybersecurity)
10 дней назад
Threat Analyst 3 (Cybersecurity)
74 000 - 123 000CAD
7 дней назад
SOC Engineer (Cybersecurity)
9 дней назад
Associate Cybersecurity Analyst - Junior (Cybersecurity)
84 500 - 131 400$