Mid Incident Response Analyst - SOC Defender Threat Hunter

VulnU; Bethesda, Northern (MD, KY); Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Incident Response Analyst to join a 24x7 SOC. Responsibilities include monitoring, triage, threat hunting, and incident containment across networks, endpoints, and apps.

You will document actions and escalate findings while collaborating with stakeholders and maturing detection capabilities. The role requires hands-on analysis using SIEM/EDR/IDS-IPS, SOAR, and forensic tools, plus developing playbooks and SOPs.

Qualifications

• Bachelor's degree in a related field; 2+ years SOC incident response experience.
• Experience with Splunk for monitoring, log analysis, and IR.
• Experience with SIEM/EDR/IDS-IPS, firewalls, and vulnerability management tools.

Responsibilities

• Perform incident triage, containment support, and documentation.
• Develop incident response playbooks and SOPs.
• Conduct threat hunting and forensic analysis to identify indicators of compromise.

Skills

Incident response

Splunk

Threat hunting

Log analysis

Forensics

SOAR

Threat intelligence

Communication

Education

Bachelor's degree

Certifications: CySA/GCIH/GSEC/CISSP

Tools

EDR

IDS/IPS

Firewalls

Vulnerability management tools

Forensic tools

Job description

Booz Allen Hamilton is seeking an Incident Response Analyst to join a 24x7 SOC. Responsibilities include monitoring, triage, threat hunting, and incident containment across networks, endpoints, and apps.

You will document actions and escalate findings while collaborating with stakeholders and maturing detection capabilities. The role requires hands-on analysis using SIEM/EDR/IDS-IPS, SOAR, and forensic tools, plus developing playbooks and SOPs.