Security Operation Center (SOC) Analyst I

V2X Inc; Orlando (FL); On-site; USD 70,000 - 78,000; Full time

Benefits offered by this job

Healthcare coverage

Life insurance

Disability benefits

Retirement plan

Paid time off

Job summary

V2X Inc is seeking a SOC Analyst to support the U.S. Army PEO STRI program through 24/7 monitoring, incident response, and defensive cyber operations. The role demands continual analysis of SIEM data, vulnerability handling, and compliance reporting across centralized and distributed locations.

Qualified candidates will have a cybersecurity-focused degree and hands-on experience with ACAS, Splunk, Windows, and Linux environments. A Secret clearance and U.S. citizenship are required.

Qualifications

• Knowledge of cybersecurity operations, protection, detection, and response.
• Understanding of current cybersecurity technologies and innovations.
• Familiar with threat lifecycle and TTPs, with ability to report findings clearly.

Responsibilities

• Perform 24/7 cybersecurity operations, incident response, and defensive measures.
• Generate RMF/DoD conformance reports and maintain compliance metrics.
• Analyze SIEM data, correlate events, and prepare incident reports.
• Support RMF A&A preparation and security architecture reviews.
• Maintain secure baselines and monitor configurations across sites.

Skills

Cybersecurity operations

Threat monitoring

Incident response

Technical reporting

Education

Bachelor's degree in Cybersecurity or IT Security

Tools

ACAS

Splunk

Windows

RHEL Linux

Cisco ASA

Job description

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

A SOC Analyst is responsible for cybersecurity operations, incident response, and defensive cyber measures across both centralized and distributed locations in support of the Warfighter Training Readiness Solutions (W-TRS) program under the U.S. Army PEO STRI. The role involves continuous 24×7×365 monitoring, analysis, and response to cyber threats, ensuring adherence to best practices and operational procedures for defensive cyber operations. The analyst proactively implements defense strategies, maintains compliance and reporting metrics, and ensures alignment with DoD cybersecurity policies. Additionally, they generate reports related to FISMA, RMF ConMon, and security incidents while operating, maintaining, and deploying enterprise cyber tools.

Responsibilities

A SOC Analyst is responsible for cybersecurity operations, incident response, and defensive cyber measures across both centralized and distributed locations in support of the Warfighter Training Readiness Solutions (W-TRS) program under the U.S. Army PEO STRI. The role involves continuous 24×7×365 monitoring, analysis, and response to cyber threats, ensuring adherence to best practices and operational procedures for defensive cyber operations. The analyst proactively implements defense strategies, maintains compliance and reporting metrics, and ensures alignment with DoD cybersecurity policies. Additionally, they generate reports related to FISMA, RMF ConMon, and security incidents while operating, maintaining, and deploying enterprise cyber tools.

• Shall support production of documentation and associated artifacts, the implementation of Cybersecurity requirements as identified in DoDI 8510 and AR 25-2 based upon the System Categorization under the Risk Management Framework (RMF).
• Operate workstation, and collect, analyze, and assimilate data into usable
• Execute Incident Responses for all incidents involving the system, prepare incident reports, and submit to appropriate IA personnel
• Validate IA Vulnerability Alerts (IAVAs) for supported baselines via vulnerability scanning
• Responsible for the maintenance and security of the current and future baseline.
• Ensure all components have a representative security configuration baseline documented.
• Continuous monitoring and compliance testing to validate the current configurations,
• Analyze and correlate audit records using the Security Incident & Event Management (SIEM)
• Analyze security requirements, perform functional and security testing, prepare initial RMF documents for system Assessment and Authorization (A&A), and present the security architecture.
• Monitor and control communications at the external boundaries, including unauthorized software, to include mobile code.
• Notify site IA personnel immediately upon detection of an unauthorized network service
• Configure and enable required security features
• Centrally review, analyze, correlate, and store audit records from multiple components within the system using the various SIEM tools and monitoring capabilities.
• Perform necessary auditing and audit review
• Perform / Monitor account management and account
• Ensure backups of audit logs is performed weekly.
• Support execution of annual FISMA according to the Assessment and Authorization (A&A) and ATO requirements

Qualifications

Education Requirements

Associate’s / Applied Associate’s / Bachelor's degree in Cybersecurity or IT Security; Advanced degree(s) preferred.

Experience Requirements

Associate’s / Applied Associate’s degree + 2 years of relevant experience

Bachelor's degree 0 years of relevant experience

Required Skills

• Knowledge of cybersecurity operations (including protection, detection, response, and sustainment).
• Knowledge and understanding of current cybersecurity technologies and emerging innovations.
• Demonstrates knowledge of the lifecycle of cybersecurity threats and use of existing TTPs.
• Strong written and verbal communication skills, and the ability to create technical reports based on analytical findings

Desired Skills

• Experience working with DoD / U.S. Army / Federal Government
• Experience / Knowledge with software/tools: Assured Compliance Assessment Solution (ACAS), Splunk, Endpoint Security Solution (ESS), Cisco Adaptive Security Appliance (ASA) Firewalls and Firepower IPS, SRGs, STIGS, DISA STIG Viewer, SCC/SCAP, Evaluate STIG, Windows, Linux (RHEL)
• Experience as related IT/Cyber position

Desired Certifications

• Security+ or CYSA+

Clearance

• Secret
• U.S Citizenship

What We Bring

• At V2X we strive to be market competitive in our total reward offerings.
• The successful candidate’s starting pay will be based on, but not limited to, their job-related skills, experience, qualifications, work location, and market conditions.
• Employee benefits include the following:
• Healthcare coverage
• Life insurance, AD&D, and disability benefits
• Retirement plan
• Wellness programs
• Paid time off, including holidays
• Learning and Development resources
• Employee assistance resources
• The following salary range is intended to display the value of the company's base pay compensation and may be modified at the discretion of the company. USD $70,000.00 – $78,000.00
• Pay and benefits are subject to change at any time and may be modified at the discretion of the company, consistent with the terms of any applicable compensation or benefit plans.

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. Clearance