Mid-Level Incident Response Analyst – SOC Specialist

Booz Allen; North Bethesda (MD); Presencial; USD 62 000 - 141 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health benefits

Tuition assistance

Paid leave

Resumo da oferta

Booz Allen is seeking an Incident Response Analyst to join a 24x7 SOC. You will monitor, detect, investigate, and respond to cybersecurity threats across networks, endpoints, applications, and security platforms, performing hands-on incident response and contributing to playbooks and procedures.

You will collaborate with federal stakeholders, produce high-quality reports, and help advance the maturity of the organization’s security operations, while maintaining clear communication with technical

Qualificações

• 2+ years of experience in a SOC performing incident response activities including event triage, log analysis, threat identification, incident documentation, and coordination of response actions.
• Experience using Splunk for security monitoring, log analysis, event correlation, investigation and incident response.
• Experience analyzing and responding to security events across enterprise networks, endpoints, applications, and security platforms such as SIEM, EDR, IDS/IPS, firewalls, and vulnerability management tools.
• Experience developing or contributing to incident response playbooks, workflows, or standard operating procedures.
• Experience with continuous monitoring and security assessment practices, including log analysis, control evaluation, and risk identification.

Responsabilidades

• Triage incidents and analyze logs and artifacts to identify indicators of compromise and containment actions.
• Develop and update incident response playbooks and runbooks for consistent response.
• Produce high-quality incident reports and executive briefings for technical and non-technical audiences.
• Collaborate with federal stakeholders and cross-functional teams to strengthen detection and response capabilities.
• Assist in investigations requiring forensic, malware, and log analysis; analyze forensic images and triage data sets.

Conhecimentos

Incident response

Splunk

Security monitoring

Threat hunting

Communication

Formação académica

Bachelor's degree

Ferramentas

SOAR platforms

Forensic tools

Descrição da oferta de emprego

Booz Allen is seeking an Incident Response Analyst to join a 24x7 SOC. You will monitor, detect, investigate, and respond to cybersecurity threats across networks, endpoints, applications, and security platforms, performing hands-on incident response and contributing to playbooks and procedures.

You will collaborate with federal stakeholders, produce high-quality reports, and help advance the maturity of the organization’s security operations, while maintaining clear communication with technical