Aerospace SOC Analyst (TS/SCI) - Threat Detection & Response

Socket.dev; Los Angeles (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Equity

Healthcare

PTO

401(k) plan

Parental leave

Lunch provided

Office events

Playa Vista office

Job summary

Apex Technology, Inc. seeks a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments.

You will work with alerts, logs, vulnerabilities, and investigations to determine what happened and what needs to happen next. Responsibilities include triaging security alerts, investigating logins and network events, and documenting resolutions while collaborating with IT and security teams to strengthen our

Qualifications

• 2+ years in SOC or incident response
• Experience with EDR, SIEM, or cloud telemetry
• Strong Windows and Linux knowledge
• Ability to write SIEM queries and document investigations
• Understanding incident triage, containment, and post-incident remediation

Responsibilities

• Monitor and triage security alerts from EDR, SIEM, identity, cloud, and network telemetry.
• Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
• Escalate incidents based on affected systems, severity, and data sensitivity.
• Collaborate with IT, Cybersecurity, and Network teams on findings.
• Document incidents, required resolutions, and affected assets.
• Maintain logging reviews and incident response documentation with IT.

Skills

Incident response

SOC operations

EDR

SIEM

Cloud security

Windows

Linux

Networking basics

Threat hunting

Python scripting

Education

Bachelor's degree in CS/IS

Security+ or equivalent

CySA+ / GCIA / GCIH

Tools

CrowdStrike Falcon

Palo Alto

Tenable

Elastic Security

Microsoft GCC High

Entra ID

AWS security telemetry

Job description

Apex Technology, Inc. seeks a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments.

You will work with alerts, logs, vulnerabilities, and investigations to determine what happened and what needs to happen next. Responsibilities include triaging security alerts, investigating logins and network events, and documenting resolutions while collaborating with IT and security teams to strengthen our