Remote SOC Analyst — Enterprise Cyber Defense

ASRC Federal; Alexandria (VA); Remote; USD 90,000 - 120,000; Full time

Job summary

ASRC Federal is a leading government contractor supporting DoD Education Activity and enterprise cyber programs. The role is remote with required night and weekend shifts to support SOC operations, RMF compliance, vulnerability management, and incident response.

Candidates must hold an active Secret clearance and bring extensive SOC experience. Join a team dedicated to protecting critical DoD data and networks while working remotely.

Qualifications

• Minimum of five years of relevant cybersecurity experience, including SOC operations, security monitoring, and incident response.
• Must hold required cybersecurity certifications from both groups listed.
• Experience with SIEM tools such as Microsoft Sentinel.
• Experience leading and managing SOC operations.
• Expertise analyzing network packets, SIEM alerts, and server and application logs to investigate anomalous or malicious activity.
• Experience tracking incidents using MITRE ATT&CK or the Cyber Kill Chain.
• Ability to analyze advanced persistent threats and map the threat lifecycle.
• Ability to work scheduled night and weekend shifts remotely.
• Active Secret security clearance.

Responsibilities

• Monitor and analyze network traffic, system logs, and other security data for signs of malicious activity.
• Use SIEM tools to investigate security alerts and notable events.
• Manage incidents throughout their lifecycle, including analysis, triage, containment, and remediation.
• Recommend improvements to prevent future incidents and expedite response based on lessons learned.
• Communicate effectively with technical and nontechnical stakeholders.
• Prepare situational awareness reports for the customer and management.
• Develop and maintain incident response playbooks, both manual and automated.
• Support the development of SIEM detection and data ingestion strategies to improve SOC visibility.
• Conduct host and log forensic analysis and malware analysis as needed.
• Perform threat hunting based on emerging adversary tactics, techniques, and procedures.
• Develop and implement security procedures to prevent future incidents.
• Provide technical support to other members of the security team.
• Stay current on cybersecurity threats and trends.

Skills

SOC operations

Security monitoring

Incident response

Threat hunting

Team collaboration

Stakeholder communication

Education

CASP+ / CCNP Security / CISA / CISSP / GCED / GCIH / CCSP

CEH / CFR / CCNA Cyber Ops / CCNA-Security / CySA+ / GCIA / GCIH / GICSP / Cloud+ / SCYBER / PenTest+

Tools

Microsoft Sentinel

Job description

ASRC Federal is a leading government contractor supporting DoD Education Activity and enterprise cyber programs. The role is remote with required night and weekend shifts to support SOC operations, RMF compliance, vulnerability management, and incident response.

Candidates must hold an active Secret clearance and bring extensive SOC experience. Join a team dedicated to protecting critical DoD data and networks while working remotely.