OT/ICS SOC Analyst: Threat Hunter & Incident Response

Chenega Professional Services Strategic Business Unit; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Chenega Military, Intelligence & Operations Support (MIOS) seeks an OT/ICS SOC Analyst in Huntsville, AL to monitor IT/OT telemetry, hunt threats, investigate complex events, and coordinate incident response across ICS/SCADA environments.

The role emphasizes correlating telemetry, applying MITRE ATT&CK, and developing playbooks to improve detection and defensive readiness. Requires DoD-related credentials and security clearance eligibility.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Software Engineering, Data Science, or a related field and 3+ years of relevant experience.
• Active DOD IAT Level II Certification or higher is required.
• Active Secret clearance with the ability to obtain and maintain TS/SCI eligibility.

Responsibilities

• Monitor and analyze security telemetry across network, endpoint, identity, cloud, application, email, and other enterprise sources using approved SIEM, XDR, NDR, and security analytics platforms.
• Investigate escalated or complex cybersecurity events to determine validity, scope, affected assets and identities, potential mission impact, and required response actions.
• Correlate alerts with asset criticality, vulnerability information, threat intelligence, user behavior, and historical activity to develop evidence-based analytical conclusions.
• Lead or perform incident triage and analysis; collect, preserve, and document relevant evidence in accordance with established procedures and evidence-handling requirements.
• Execute authorized containment and response actions, including host isolation, account restriction, indicator blocking, or other approved measures, and coordinate eradication and recovery activities with responsible stakeholders.
• Develop clear incident records, analytical findings, timelines, and technical reports; communicate status, risk, and recommended actions to SOC leadership and mission stakeholders.

Skills

Cybersecurity operations

Security monitoring

Incident response

Threat analysis

SOC experience

Education

Bachelor's degree in cybersecurity/IT field

Associate's degree + 5+ years

High school diploma + 7+ years

Tools

Dragos Platform

Claroty CTD

Nozomi Guardian

Tenable OT

ForeScout eyeInspect

Job description

Chenega Military, Intelligence & Operations Support (MIOS) seeks an OT/ICS SOC Analyst in Huntsville, AL to monitor IT/OT telemetry, hunt threats, investigate complex events, and coordinate incident response across ICS/SCADA environments.

The role emphasizes correlating telemetry, applying MITRE ATT&CK, and developing playbooks to improve detection and defensive readiness. Requires DoD-related credentials and security clearance eligibility.