Senior SOC Analyst/Lead

Location: Remote from Virginia, United States. Shift schedule includes 8AM–4PM ET Monday–Friday and may include weekends and holidays to support 24/7 operations.

Salary: $135,000–$150,000 per year.

Company

Everforth hirify.global is the federal segment of a global technology organization delivering data and AI, cybersecurity, and enterprise transformation solutions for defense, intelligence, and federal civilian agencies.

What you will do

• Lead monitoring, management, investigation, and escalation of security incidents across SIEM, endpoint, cloud, and infrastructure environments.
• Analyze and triage Indicators of Compromise, investigate policy violations, and coordinate eradication, mitigation, and remediation activities.
• Develop and maintain SOC standard operating procedures, technical playbooks, operational runbooks, reports, and visualizations.
• Lead root cause analyses and post-incident reviews, documenting lessons learned and defining process or technology improvements.
• Oversee threat hunting initiatives, review hunt reports, and collaborate with cyber threat intelligence teams on emerging detection patterns.
• Train and mentor SOC analysts while providing subject-matter guidance to stakeholders and managing SOC security technologies.

Requirements

• Bachelor’s degree in cybersecurity or a related field.
• 5+ years of cybersecurity operations and incident response experience, including 3+ years in a SOC and 2+ years in a leadership role.
• In-depth knowledge of SIEM technologies such as QRadar and Splunk, EDR such as CrowdStrike, IDS/IPS, malware analysis, and vulnerability management tools such as Tenable.
• Experience leading and mentoring junior analysts, analyzing and triaging IoCs, and using at least two analysis tools in a CIRT or similar investigative environment.
• Strong knowledge of computer and network fundamentals, current cyber threats, attack lifecycles, and Tactics, Techniques, and Procedures.
• Excellent communication, research, written reporting, leadership, and problem-solving skills, with the ability to remain calm in high-stress situations.

Nice to have

• Industry certifications such as CISSP, CISM, GIAC, or CEH.
• Experience with threat intelligence reporting, threat hunting, digital forensics, malware analysis, APTs, or modern attack techniques.
• Proficiency with SOAR, orchestration, and scripting in Python or PowerShell.

Culture & Benefits

• Remote work arrangement supporting a mission-driven federal technology organization.
• Work focused on mission-critical cybersecurity outcomes for defense, intelligence, and federal civilian agencies.
• Culture centered on excellence in delivery, innovation, accountability, and professional development.
• Benefits information is provided by hirify.global.