Mid-Level SOC Analyst: Threat Detection & Incident Response

Koniag Services, Inc.; Washington (District of Columbia); On-site; USD 85,000 - 120,000; Full time

Job summary

Koniag Data Solutions, a Koniag Government Services company, seeks a Mid-Level Security Operations Center Analyst to support SBA in Washington, DC. You will monitor, detect, and respond to cybersecurity threats across SBA infrastructure, collaborating with senior analysts and the technical lead.

You will analyze security events, refine SIEM rules, and assist in incident response, for a role requiring strong communication and solid SOC experience in a federal environment.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 3+ years of cybersecurity operations experience in a SOC/cyber defense environment.
• Experience with SIEM platforms and security monitoring tools in an operational environment.
• Certifications such as Security+, CySA+, CSA, GSEC, GCIH, SSCP preferred.
• Ability to obtain and maintain a Public Trust Clearance.

Responsibilities

• Monitor SBA networks, systems, endpoints, and cloud environments using SIEM/IDS/IPS/EDR to detect threats.
• Triage alerts, determine incident severity, and escalate as needed.
• Support incident response actions including containment and evidence preservation.
• Investigate security events using logs, network data, and endpoints.
• Document incidents and findings in ticketing systems and SOPs.
• Assist in developing SIEM detection rules and alert thresholds.
• Support threat hunting and differential IOC analysis.
• Review threat intelligence and incorporate into monitoring activities.
• Contribute to SOC SOPs, playbooks, and runbooks.

Skills

Cybersecurity operations

SIEM platforms

Incident response

Threat hunting

English communication

Network security concepts

Analytical thinking

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Splunk

Microsoft Sentinel

ArcSight

EDR tools

Job description

Koniag Data Solutions, a Koniag Government Services company, seeks a Mid-Level Security Operations Center Analyst to support SBA in Washington, DC. You will monitor, detect, and respond to cybersecurity threats across SBA infrastructure, collaborating with senior analysts and the technical lead.

You will analyze security events, refine SIEM rules, and assist in incident response, for a role requiring strong communication and solid SOC experience in a federal environment.