Remote SOC Analyst — Threat Hunting & Incident Response

Peraton; United States; À distance; USD 80 000 - 128 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision

401(k)

PTO

Discretionary bonus

Résumé du poste

Peraton is seeking a skilled SOC Analyst to join our remote team supporting the Department of State/DT Consular Infrastructure Operations. The role focuses on security monitoring, threat hunting, and incident response for mission-critical systems.

Candidates should have DoD-grade clearance and extensive SIEM experience. The position offers a fully remote work arrangement with occasional on-site participation in the DMV area.

Qualifications

• U.S. citizenship and active SECRET clearance.
• 5+ years in cybersecurity/SOC in a federal government environment.
• 3+ years of SOC or cybersecurity experience.
• Experience with SIEM platforms, preferably Splunk.
• Experience using Splunk dashboards and Microsoft Sentinel.
• Experience querying and analyzing security data (SPL).
• Knowledge of network and application security threats.
• Understanding of event correlation.

Responsabilités

• Monitor and investigate security alerts and perform threat hunting.
• Analyze and characterize network traffic for anomalies.
• Create advanced SPL queries and dashboards.
• Coordinate with teams to investigate threats and perform forensics.
• Review logs from hosts, networks, firewalls, and IDS.
• Utilize SIEM/EDR tools to monitor environments.
• Document configuration standards, policies, and procedures.
• Advise on risks and mitigations.

Connaissances

Security clearance

Cybersecurity experience

SOC experience

Splunk

Microsoft Sentinel

SPL queries

Network security

Event correlation

Security+ certification

RMF/NIST

Cloud security

Scripting

Linux/Windows

WAF features

Formation

Bachelor's degree

Associates degree

High School diploma

Outils

Splunk

Microsoft Sentinel

Description du poste

Peraton is seeking a skilled SOC Analyst to join our remote team supporting the Department of State/DT Consular Infrastructure Operations. The role focuses on security monitoring, threat hunting, and incident response for mission-critical systems.

Candidates should have DoD-grade clearance and extensive SIEM experience. The position offers a fully remote work arrangement with occasional on-site participation in the DMV area.