Federal SOC Analyst: Incident Response & Threat Detection

Halvik; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

STD/LTD insurance

11 federal holidays & PTO

401(k) with matching

Flexible Spending Accounts

Tuition Assistance

Charitable Contribution matching

Job summary

Halvik is seeking a candidate to provide technical and operational support for a Federal customer's Security Operations Center (SOC). The role covers security monitoring, incident response, and threat detection across a hybrid IT environment including on-premises and cloud services.

Hands-on troubleshooting, remediation validation, and compliance reviews are part of the work. The ideal candidate will have experience with SOC monitoring methods, TTPs, and coordinating with ISSOs and system owners

Qualifications

• Bachelor's degree required.
• 2–6 years of cybersecurity experience.
• Proficient in analyzing, monitoring and reporting cyber threats.
• Knowledge of NIST SP 800-53 and FedRAMP guidance.
• CISSP or equivalent certification is required.

Responsibilities

• Lead and coordinate incident response with ISSOs and cybersecurity staff.
• Develop and refine incident response playbooks and procedures.
• Proactive detection of stealthy activity and anomalous behavior.
• Perform forensic analysis, log correlation, and campaign mapping.
• Provide recommendations to strengthen detection and mitigation capabilities.
• Support federal incident-reporting compliance.

Skills

Cybersecurity analysis

Incident response

Threat detection

Log correlation

Compliance review

Stakeholder communication

Education

Bachelor's degree

Tools

SIEM tools

Forensic tooling

SOC monitoring technologies

Job description

Halvik is seeking a candidate to provide technical and operational support for a Federal customer's Security Operations Center (SOC). The role covers security monitoring, incident response, and threat detection across a hybrid IT environment including on-premises and cloud services.

Hands-on troubleshooting, remediation validation, and compliance reviews are part of the work. The ideal candidate will have experience with SOC monitoring methods, TTPs, and coordinating with ISSOs and system owners