Remote SOC Analyst - Threat Detection & Response

Phase2 Technology; Columbia (MD); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Security Operations Center Analyst to monitor, detect, and respond to cyber threats across defense-related networks. You will analyze logs, threat intelligence, and security alerts to identify advanced threats and coordinate incident containment.

If you have strong SIEM experience, proficiency with Splunk, and the ability to work with cross-functional teams, you will help harden networks and protect critical missions.

Qualifications

• Experience with SIEM fundamentals and Splunk.
• Knowledge of networking fundamentals.
• Proficiency with Bro (Zeek) configurations.
• Experience with Suricata or Snort.
• Ability to review Nessus scans and Firewall configurations.
• Ability to review Linux hosts for indicators of compromise and hardening.
• Navigate Unix-like systems via CLI.
• Able to read and analyze logs from diverse sources.
• TS/SCI clearance with polygraph.
• HS diploma or GED with 6+ years incident response OR Bachelor's with 2+ years incident response.

Responsibilities

• Analyze logs, forensic data, and threat intel to detect advanced threats.
• Assess attacker goals and advise on gaps to harden networks.
• Support incident response procedures and collaborate with teams to contain and respond to incidents.

Skills

SIEM Fundamentals

Splunk

Networking Basics

Bro/Zeek

Suricata/Snort

Nessus/Firewall Review

Linux Hardening

Unix CLI

Log Analysis

TS/SCI + Poly

Education

HS Diploma or GED

Bachelor's degree

Tools

Splunk Phantom

SOAR

Job description

Booz Allen Hamilton is seeking a Security Operations Center Analyst to monitor, detect, and respond to cyber threats across defense-related networks. You will analyze logs, threat intelligence, and security alerts to identify advanced threats and coordinate incident containment.

If you have strong SIEM experience, proficiency with Splunk, and the ability to work with cross-functional teams, you will help harden networks and protect critical missions.