Remote SOC Analyst: Threat Hunting & Incident Response

Peraton; Reston (VA); Remote; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a SOC Analyst to join our DOS CAEIO program, delivering IT operations and security across consular services globally.

This fully remote role prefers candidates in the Washington DC metro for occasional onsite meetings. You will monitor alerts, perform threat hunting, analyze logs, and coordinate with internal and external teams to mitigate risks, while building SOC processes and mentoring junior staff.

Qualifications

• U.S. citizenship with an active SECRET clearance.
• 2+ years of cybersecurity, SOC, or systems security experience in a federal government environment.
• 2+ years of SOC or cybersecurity related experience.
• Experience working with a SIEM platform, preferably Splunk.
• Experience querying and analyzing security data, including SPL.
• Familiarity with RMF and NIST standards (NIST SP 800-53).
• Understanding of TCP/IP and network traffic.

Responsibilities

• Monitor and investigate security alerts, perform threat hunting, and notify designated personnel.
• Analyze and characterize network traffic to identify anomalies.
• Create advanced ad hoc SPL queries.
• Coordinate with internal and external teams to investigate threats and risks.
• Review and analyze log files from multiple sources to identify threats.
• Utilize SIEM and EDR tools to monitor the environment.
• Develop and document SOC policies and procedures.
• Advise management on technology risks and mitigations.
• Train and mentor junior SOC team members.
• Plan and execute SOC-related projects.

Skills

Splunk

Microsoft Sentinel

SPL queries

Threat hunting

Log analysis

Incident response

Networking basics

Security+ CE

RMF/NIST

Education

Bachelor's degree + 2 years

Associates degree + 4 years

High school diploma + 6 years

Tools

Splunk

Microsoft Sentinel

EDR tools

Job description

Peraton is seeking a SOC Analyst to join our DOS CAEIO program, delivering IT operations and security across consular services globally.

This fully remote role prefers candidates in the Washington DC metro for occasional onsite meetings. You will monitor alerts, perform threat hunting, analyze logs, and coordinate with internal and external teams to mitigate risks, while building SOC processes and mentoring junior staff.