Security Operations Analyst – Senior

C3EL; Washington (District of Columbia); On-site; USD 95,000 - 125,000; Full time

Job summary

C3EL is hiring a Senior Security Operations Analyst in Washington, DC. The role involves monitoring and responding to cybersecurity threats while providing advanced analysis and support. Candidates should have over 6 years of experience in security operations, IAT Level II certification, and hands-on expertise with SIEM platforms. The position offers an opportunity to lead incident response efforts and mentor junior analysts, ensuring the protection of organizational systems and data.

Qualifications

• 6+ years of experience in security operations, incident response, or threat analysis.
• Current IAT Level II or higher certification required.
• Hands-on experience with SIEM platforms and security monitoring tools.

Responsibilities

• Monitor security events and alerts to identify potential threats.
• Lead incident response activities, including containment and recovery.
• Provide mentorship and guidance to junior analysts.

Skills

Incident response

Cybersecurity analysis

Log analysis

Threat analysis

Strong communication

Education

Bachelor’s degree in Cybersecurity or related field

Tools

SIEM platforms (e.g., Splunk)

Endpoint detection and response (EDR) tools

Automation tools (e.g., Python, PowerShell)

Job description

Job Title: Security Operations Analyst – Senior

Location: Washington, DC

(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)

Description:

C3EL is seeking a Senior Security Operations Analyst to support security operations in Washington, DC. This role is responsible for monitoring, detecting, and responding to cybersecurity threats while ensuring the protection of organizational systems and data. The selected candidate will provide advanced analysis and incident response support, as well as guidance to junior analysts.

Responsibilities:

• Monitor security events and alerts using SIEM and other security tools to identify potential threats.
• Analyze and investigate security incidents, including malware, phishing, and unauthorized access attempts.
• Lead incident response activities, including containment, eradication, and recovery efforts.
• Perform threat hunting and proactive analysis to identify emerging risks.
• Correlate data from multiple sources to assess impact and recommend mitigation strategies.
• Develop and maintain incident response procedures and playbooks.
• Document incidents, findings, and remediation actions in accordance with established processes.
• Collaborate with engineering and IT teams to improve security posture and response capabilities.
• Provide mentorship and guidance to junior analysts.

Minimum Qualifications:

• Current IAT Level II or higher certification (e.g., Security+ CE, CySA+, CASP+, or equivalent).
• 6+ years of experience in security operations, incident response, or threat analysis.
• Hands‑on experience with SIEM platforms (e.g., Splunk) and security monitoring tools.
• Knowledge of common attack vectors, threat actors, and defensive techniques.
• Experience analyzing logs, network traffic, and endpoint activity.
• Familiarity with operating systems (Windows, Linux) and basic networking concepts.
• Strong analytical, troubleshooting, and communication skills.

Desired Qualifications:

• Experience in a Security Operations Center (SOC) environment.
• Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK).
• Experience with endpoint detection and response (EDR) tools.
• Scripting or automation experience (e.g., Python, PowerShell).
• Experience leading incident response efforts or mentoring junior analysts.

Education:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred, OR an Associate’s degree plus ten (10) years of recent specialized experience, OR 12 years of recent specialized experience.