Hybrid SOC Analyst - Incident Response & Threat Intel

TECHEAD; Richmond (VA); Hybrid; USD 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm in Richmond, Virginia is seeking an experienced cybersecurity analyst. The ideal candidate will have 2-5 years in cybersecurity operations and mastery of tools like Splunk and Qualys. Responsibilities include monitoring alerts, investigating incidents, and optimizing detection rules. This hybrid role requires excellent documentation and communication skills. Industry certifications such as CompTIA Security+ or GIAC are a plus. Join a firm that values relationship-building and employes equal opportunity for all.

Qualifications

• 2–5 years of experience in cybersecurity operations, incident response, or SOC.
• Experience with cybersecurity tools like Splunk, Qualys, and ticketing systems.
• Strong understanding of incident response lifecycle (NIST 800-61).

Responsibilities

• Monitor and triage alerts from SIEM, EDR, and NDR tools.
• Investigate incidents validating severity and potential impact.
• Update and refine incident response playbooks and procedures.

Skills

Cybersecurity operations

Incident response

Threat intelligence

Log analysis

Documentation skills

Education

Bachelor’s degree in Cybersecurity, Information Technology, or related discipline

Tools

Splunk

Qualys

ServiceNow

Jira

Job description

A leading cybersecurity firm in Richmond, Virginia is seeking an experienced cybersecurity analyst. The ideal candidate will have 2-5 years in cybersecurity operations and mastery of tools like Splunk and Qualys. Responsibilities include monitoring alerts, investigating incidents, and optimizing detection rules. This hybrid role requires excellent documentation and communication skills. Industry certifications such as CompTIA Security+ or GIAC are a plus. Join a firm that values relationship-building and employes equal opportunity for all.