Senior SOC Business Analyst

Evans & Chambers; Metro Manila; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

Evans & Chambers is seeking a Senior SOC Business Analyst to drive requirements elicitation for a 24x7 Security Operations Center. You will translate mission needs and compliance mandates into validated, traceable requirements for architecture, engineering, and operations teams.

The role interfaces with program leads, SOC architects, and intelligence partners, ensuring feasible, testable, and well-documented requirements while coordinating interviews, workshops, and governance activities.

Qualifications

• Bachelor's degree in information systems, cybersecurity, computer science, business, or a related field.
• 12+ years of business or systems analysis experience, with 5+ years in federal, DoD, or Intelligence Community environments.
• CySA+, GCIA, GCIH, or CISSP required.

Responsibilities

• Bridges between the SOC Program Lead and the SOC Technical Architect to ensure traceability of requirements.
• Presents prioritized requirements and trade-offs for scope, cost, and schedule decisions.
• Escalates unresolved stakeholder conflicts, requirement risks, and dependencies with recommended actions.
• Prepares requirements content for leadership briefings, governance boards, and acquisition documents.
• Collaborates with the SOC Technical Architect to reflect technical realities in requirements.
• Validates each requirement is feasible, unambiguous, and testable before baselining.
• Assesses impact of proposed design and requirement changes.
• Holds regular joint sessions to review requirements status and design decisions.
• Identifies and maps stakeholders across mission owners, SOC operators, intelligence partners, IT operations, legal, privacy, and acquisition.
• Plans and facilitates interviews, workshops, and site visits to capture current-state and future-state needs.
• Elicits requirements for core SOC functions: 24x7 monitoring, threat detection, incident response, threat intelligence, threat hunting, vulnerability management.
• Documents current-state and target-state SOC processes and run gap analyses.
• Writes business, functional, non-functional, security, and interface requirements clearly.
• Develops CONOPS inputs, use cases, user stories, and SOC playbook requirements.
• Defines tooling requirements for SIEM, SOAR, EDR/XDR, NDR, log management, case management, and threat intelligence.
• Builds and maintains a requirements traceability matrix (RTM).

Skills

Requirements elicitation

Traceability

Stakeholder management

Requirements validation

Education

Bachelor's degree in information systems, cybersecurity, computer science, business, or a related field

Tools

SIEM

SOAR

EDR/XDR

NDR

Log management

Case management

Threat intelligence platforms

Job description

Senior SOC Business Analyst
Brief Description:

Our organization is actively seeking a highly motivated Senior Security Operations Center (SOC) Business Analyst to join our team!

We partner with the US national defense community to create fully integrated, resilient, and innovative digital solutions that enable them to make smart decisions in real-time. We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal? To enhance our nation's ability to identify, address, and act – no matter what challenges arise.

Clearance Required: Active TS/SCI

Location: Local remote with up to 40% travel within the National Capitol Region (NCR)

Description:

The Senior Business Analyst reports directly to the SOC Program Manager and leads requirements elicitation for a Security Operations Center (SOC). The role turns mission needs, threat realities, and compliance mandates into a validated, traceable requirements baseline that architects, engineers, and analyst staff can build and operate against.

• Bridges between the SOC Program Lead, who owns mission outcomes, and the SOC Technical Architect, who owns the technical design, making sure that what the program commits to and what the architecture delivers trace to the same validated requirements.
• Presents prioritized requirements and trade-offs so the Program Lead can make scope, cost, and schedule decisions.
• Escalates unresolved stakeholder conflicts, requirement risks, and dependencies with recommended courses of action.
• Prepares requirements content for leadership briefings, governance boards, and acquisition documents.
• Collaborates with the SOC Technical Architect early so requirements reflect technical realities, such as classification boundaries, cross-domain needs, and existing enterprise systems.
• Validates that each requirement is feasible, unambiguous, and testable before it is baselined.
• Assesses the impact of proposed design and requirement changes
• Holds a regular joint working session to review requirements status, open issues, and design decisions.
• Identifies and maps stakeholders across mission owners, SOC operators, intelligence partners, IT operations, legal, privacy, and acquisition.
• Plans and facilitates interviews, workshops, and site visits to capture current-state pain points and future-state needs.
• Elicits requirements for core SOC functions: 24x7 monitoring, threat detection, incident response, threat intelligence, threat hunting, and vulnerability management.
• Documents current-state (as-is) and target-state (to-be) SOC processes, workflows, and escalation paths, and run gap analysis between them.
• Writes business, functional, non-functional, security, and interface requirements in clear, testable language.
• Develops concept of operations (CONOPS) inputs, use cases, user stories, operational scenarios, and SOC playbook requirements.
• Defines requirements for tooling categories such as SIEM, SOAR, EDR/XDR, NDR, log management, case management, and threat intelligence platforms, without bias toward any vendor.
• Builds and maintains a requirements traceability matrix (RTM) linking each requirement to its source, design element, and verification method

Qualifications:

• Bachelor's degree in information systems, cybersecurity, computer science, business, or a related field;
• 12+ years of business or systems analysis experience, with 5+ years in federal, DoD, or Intelligence Community environments.
• CySA+, GCIA, GCIH, or CISSP required.

Get on board!
Weare a progressive IT solutions provider. We offer excellent salaries and benefits in a fun and energized work environment. We are committed to rewarding goal-oriented professionals who enjoy meeting challenges head-on.

Title

Senior SOC Business Analyst

ID

10000271

Department

Information Technology

Senior SOC Business Analyst
Brief Description:

Our organization is actively seeking a highly motivated Senior Security Operations Center (SOC) Business Analyst to join our team!

We partner with the US national defense community to create fully integrated, resilient, and innovative digital solutions that enable them to make smart decisions in real-time. We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal? To enhance our nation's ability to identify, address, and act – no matter what challenges arise.

Clearance Required: Active TS/SCI

Location: Local remote with up to 40% travel within the National Capitol Region (NCR)

Description:

The Senior Business Analyst reports directly to the SOC Program Manager and leads requirements elicitation for a Security Operations Center (SOC). The role turns mission needs, threat realities, and compliance mandates into a validated, traceable requirements baseline that architects, engineers, and analyst staff can build and operate against.

Essential Duties:

• Bridges between the SOC Program Lead, who owns mission outcomes, and the SOC Technical Architect, who owns the technical design, making sure that what the program commits to and what the architecture delivers trace to the same validated requirements.
• Presents prioritized requirements and trade-offs so the Program Lead can make scope, cost, and schedule decisions.
• Escalates unresolved stakeholder conflicts, requirement risks, and dependencies with recommended courses of action.
• Prepares requirements content for leadership briefings, governance boards, and acquisition documents.

• Collaborates with the SOC Technical Architect early so requirements reflect technical realities, such as classification boundaries, cross-domain needs, and existing enterprise systems.
• Validates that each requirement is feasible, unambiguous, and testable before it is baselined.
• Assesses the impact of proposed design and requirement changes

• Holds a regular joint working session to review requirements status, open issues, and design decisions.

• Identifies and maps stakeholders across mission owners, SOC operators, intelligence partners, IT operations, legal, privacy, and acquisition.
• Plans and facilitates interviews, workshops, and site visits to capture current-state pain points and future-state needs.
• Elicits requirements for core SOC functions: 24x7 monitoring, threat detection, incident response, threat intelligence, threat hunting, and vulnerability management.

• Documents current-state (as-is) and target-state (to-be) SOC processes, workflows, and escalation paths, and run gap analysis between them.
• Writes business, functional, non-functional, security, and interface requirements in clear, testable language.
• Develops concept of operations (CONOPS) inputs, use cases, user stories, operational scenarios, and SOC playbook requirements.
• Defines requirements for tooling categories such as SIEM, SOAR, EDR/XDR, NDR, log management, case management, and threat intelligence platforms, without bias toward any vendor.

• Builds and maintains a requirements traceability matrix (RTM) linking each requirement to its source, design element, and verification method

Qualifications:

• Bachelor's degree in information systems, cybersecurity, computer science, business, or a related field;
• 12+ years of business or systems analysis experience, with 5+ years in federal, DoD, or Intelligence Community environments.
• CySA+, GCIA, GCIH, or CISSP required.

Get on board!
Weare a progressive IT solutions provider. We offer excellent salaries and benefits in a fun and energized work environment. We are committed to rewarding goal-oriented professionals who enjoy meeting challenges head-on.

All employment opportunities are made without regard to age, race, creed, color, religion, sex national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status or any other basis protected by law.