DoD TS/SCI Eligible SOC Analyst | 24/7 Incident Response

Leidos Inc; Alexandria (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Leidos' Digital sector in Alexandria, VA seeks SOC Analysts to join our team on a continuing basis. This role requires on-site shifts in a 24/7 SOC, with a minimum DoD Top Secret clearance and SCI eligibility.

Candidates should have 2+ years of incident handling/response and SOC experience to support customer networks, endpoints, and incident reporting. Responsibilities include correlating evidence from alerts and logs, conducting intermediate log analysis, and documenting actions in knowledge

Qualifications

• Must have 2+ years of incident handling/response experience in a SOC environment.
• Bachelor's degree and 4+ years of relevant experience; additional military service may be considered in lieu of degree.
• Active DoD Top Secret clearance with ability to obtain SCI.
• DoD 8570 IAT II or higher certification (e.g., Security+ CE, SSCP, GSEC) prior to starting.
• DoD 8570 CSSP-Analyst certification (e.g., CEH, CySA+, GCIA) within 6 months of starting.

Responsibilities

• Utilize alerts from endpoints, IDS/IPS, netflow, and sensors to identify compromises on customer networks/endpoints.
• Review large log files, pivot between data sets, and correlate evidence for incidents.
• Pass triaged alerts to senior SOC personnel and assist in identifying malicious actors.
• Document analysis, findings, and actions in a case/knowledge management system.
• Create and distribute incident reports to customers and higher headquarters.

Skills

Incident handling

SOC experience

Log analysis

Education

Bachelor's degree

Job description

Leidos' Digital sector in Alexandria, VA seeks SOC Analysts to join our team on a continuing basis. This role requires on-site shifts in a 24/7 SOC, with a minimum DoD Top Secret clearance and SCI eligibility.

Candidates should have 2+ years of incident handling/response and SOC experience to support customer networks, endpoints, and incident reporting. Responsibilities include correlating evidence from alerts and logs, conducting intermediate log analysis, and documenting actions in knowledge