Security Operations Analyst – Senior

C3EL; Washington (Washington County); On-site; USD 120,000 - 180,000; Full time

Job summary

C3EL is seeking a Senior Security Operations Analyst to support security operations in Washington, DC. The role monitors, detects, and responds to cybersecurity threats while protecting systems and data, offering advanced analysis and incident response support.

The candidate will mentor junior analysts and collaborate with engineering and IT teams to improve security posture. Required certifications and a strong track record in security operations are expected.

Qualifications

• Security operations expertise and incident response experience.
• Experience analyzing logs, network traffic, and endpoint activity.
• Hands-on with SIEM platforms and security monitoring tools.

Responsibilities

• Monitor security events and alerts using SIEM and other security tools.
• Analyze and investigate security incidents including malware, phishing, and unauthorized access.
• Lead incident response activities including containment, eradication, and recovery.
• Perform threat hunting and proactive analysis to identify emerging risks.
• Correlate data from multiple sources to assess impact and mitigation.
• Develop and maintain incident response procedures and playbooks.
• Document incidents, findings and remediation actions.
• Collaborate with engineering and IT teams to improve security posture and response capabilities.
• Provide mentorship and guidance to junior analysts.

Skills

Security operations

Incident response

Threat analysis

SIEM (Splunk)

Threat hunting

Data correlation

Analytical skills

Communication skills

Mentoring

Education

Bachelor's degree in Cybersecurity

Associate’s degree + 10 years of experience

12 years of specialized experience

Tools

Splunk

EDR tools

Python

PowerShell

Job description

CONTINGENT UPON CONTRACT AWARD

Overview:

Job Title: Security Operations Analyst – Senior

Location : Washington, DC

(Due to the nature of the work and contract requirements, U.S. Citizenship isrequired.)

Description:

C3EL is seeking a Senior Security Operations Analyst to support security operations in Washington, DC. This role is responsible for monitoring, detecting, and responding to cybersecurity threats while ensuring the protection of organizational systems and data. The selected candidate will provide advanced analysis and incident response support, as well as guidance to junior analysts.

Responsibilities will include, but not be limited to:

• Monitor security events and alerts using SIEM and other security tools to identify potential threats.
• Analyze and investigate security incidents, including malware, phishing, and unauthorized access attempts.
• Lead incident response activities, including containment, eradication, and recovery efforts.
• Perform threat hunting and proactive analysis to identify emerging risks.
• Correlate data from multiple sources to assess impact and recommend mitigation strategies.
• Develop and maintain incident response procedures and playbooks.
• Document incidents, findings, and remediation actions in accordance with established processes.
• Collaborate with engineering and IT teams to improve security posture and response capabilities.
• Provide mentorship and guidance to junior analysts.

Minimum Qualifications:

• U.S. Citizenship.
• Current IAT Level II or higher certification (e.g., Security+ CE, CySA+, CASP+, or equivalent).
• 6+ years of experience in security operations, incident response, or threat analysis.
• Experience in security operations, incident response, or threat analysis.
• Hands-on experience with SIEM platforms (e.g., Splunk) and security monitoring tools.
• Knowledge of common attack vectors, threat actors, and defensive techniques.
• Experience analyzing logs, network traffic, and endpoint activity.
• Familiarity with operating systems (Windows, Linux) and basic networking concepts.
• Strong analytical, troubleshooting, and communication skills.

Desired Qualifications:

• Experience in a Security Operations Center (SOC) environment.
• Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK).
• Experience with endpoint detection and response (EDR) tools.
• Scripting or automation experience (e.g., Python, PowerShell).
• Experience leading incident response efforts or mentoring junior analysts.

Education:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred, OR an Associate’s degree plus ten (10) years of recent specialized experience, OR 12 years of recent specialized experience.