Remote Cyber Security Analyst | SOC & Threat Detection

Boston Government Services; Oak Ridge (TN); Hybrid; USD 70,000 - 115,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401K

Paid vacation

Long and short-term disability

Job summary

Boston Government Services is seeking a Cyber Security Analyst for a versatile role supporting federal clients. The position involves account management, access review, and incident response within a distributed environment.

You will analyze threats, develop playbooks, and contribute to threat hunts while coordinating with IT teams and stakeholders to improve detections and containment timelines. This role offers flexible work arrangements and growth opportunities.

Qualifications

• 1-3 years in a SOC, cyber security 'blue team', or closely related role.
• Strong grasp of TCP/IP, OSI model, and common protocols (HTTP, DNS, SMTP). Windows/Linux/macOS fundamentals; AD/Azure AD concepts; basic cloud logging.
• Experience with at least one SIEM and one EDR/XDR platform.
• Ability to craft queries using common languages; regex, JSON and APIs; basic scripting in Python/PowerShell/Bash.
• Excellent analytical, problem-solving, and communication skills; able to operate under pressure in a shift or on-call environment.
• Must be a U.S. citizen; successful drug screening.

Responsibilities

• Resetting user passwords and resetting service account passwords.
• Analyzing usage patterns to identify inactive accounts or inappropriate use and reviewing access requests.
• Lead investigations end-to-end (triage to containment), delivering timelines and root cause analysis.
• Execute/coordinate containment and remediation with proper approvals and verification.

Skills

Analytical skills

Blue team security

Threat hunting

Incident response

Team collaboration

Tools

SIEM

EDR/XDR

Splunk SPL

CrowdStrike

ServiceNow

Job description

Boston Government Services is seeking a Cyber Security Analyst for a versatile role supporting federal clients. The position involves account management, access review, and incident response within a distributed environment.

You will analyze threats, develop playbooks, and contribute to threat hunts while coordinating with IT teams and stakeholders to improve detections and containment timelines. This role offers flexible work arrangements and growth opportunities.