Mid-Level SOC Incident Responder

Booz Allen Hamilton; Bethesda (MD); Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Incident Response Analyst, Mid, to join a 24x7 SOC. You will monitor and respond to cybersecurity threats across enterprise networks, endpoints, applications, and security platforms using SIEM, EDR, IDS/IPS, SOAR, and forensic tools.

You will develop incident response playbooks, conduct threat hunting, coordinate with federal stakeholders, and produce clear reports and briefings for both technical and non-technical audiences.

Qualifications

• 2+ years of SOC incident response experience with event triage and documentation.
• Experience using Splunk for security monitoring and incident response.
• Experience analyzing security events across networks, endpoints, apps, and security platforms.
• Bachelor's degree in a related field.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.

Responsibilities

• Respond to cybersecurity incidents and support investigations with forensic and log analysis.
• Perform hands-on incident response, including containment and documentation.
• Develop or contribute to incident response playbooks and SOPs.
• Collaborate with federal stakeholders and communicate findings to technical and non-technical audiences.
• Produce high-quality incident reports and briefings and strengthen detection capabilities.

Skills

SOC incident response

Splunk

Security events analysis

Incident response playbooks

Threat hunting

Communication

Public Trust eligibility

Education

Bachelor's degree

Tools

Splunk

SIEM

EDR

IDS/IPS

SOAR

Forensic tools

Job description

Booz Allen Hamilton is seeking an Incident Response Analyst, Mid, to join a 24x7 SOC. You will monitor and respond to cybersecurity threats across enterprise networks, endpoints, applications, and security platforms using SIEM, EDR, IDS/IPS, SOAR, and forensic tools.

You will develop incident response playbooks, conduct threat hunting, coordinate with federal stakeholders, and produce clear reports and briefings for both technical and non-technical audiences.