DoD TS/SCI SOC Analyst — On-Site, Day Shift

Leidos; Alexandria (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos' Digital Modernization sector seeks a SOC Analyst in Alexandria, VA to support Day Shift on-site. You must hold an active Top Secret clearance with SCI eligibility and have 2+ years in incident handling and SOC experience.

The role entails monitoring alerts, investigating logs, coordinating with senior staff, and producing reports for customers and HQ. Required certifications include DoD 8570 IAT II or higher and CSSP-Analyst within 6 months.

Qualifications

• Willing to perform shift work on site, including weekends.
• Bachelor's degree and 8+ years of relevant experience; 12 years minimum without education.
• 2+ years incident handling/response experience.
• 2+ years of SOC experience.
• Active DoD Top Secret clearance with SCI eligibility.
• DoD 8570 IAT II or higher certification required.
• DoD CSSP-Analyst certification within 6 months of starting.

Responsibilities

• Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks/endpoints.
• Perform intermediate-level review of massive log files, pivot between data sets, and correlate evidence for incident investigations.
• Pass triaged alerts to senior-level SOC personnel and assist in identifying malicious actors on customer networks.
• Document analysis, findings, and actions in a case/knowledge management system.
• Creation and distribution of incident reports to customers and higher headquarters.

Skills

Strong communication

Analytical troubleshooting

Self-starter/motivated

Independent worker

Education

Bachelor's degree

DoD 8570 IAT II or higher

CSSP-Analyst cert within 6 months

Tools

ArcSight

Splunk

QRadar

LogLogic

Unix/Linux command line

Job description

Leidos' Digital Modernization sector seeks a SOC Analyst in Alexandria, VA to support Day Shift on-site. You must hold an active Top Secret clearance with SCI eligibility and have 2+ years in incident handling and SOC experience.

The role entails monitoring alerts, investigating logs, coordinating with senior staff, and producing reports for customers and HQ. Required certifications include DoD 8570 IAT II or higher and CSSP-Analyst within 6 months.