Security Operations Center Analyst

Oxford Global Resources; Virginia (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

Oxford Global Resources is seeking a SOC Analyst Tier III consultant to support a large defense contractor’s security operations center. You will lead complex incident response, threat analysis, and escalation, collaborating with incident response teams, infrastructure engineering, and cybersecurity stakeholders.

This role emphasizes mentoring junior analysts, proactive threat hunting, and root-cause investigations across endpoints, networks, cloud, and identity platforms within a 40,000-user

Qualifications

• 5+ years in SOC, cyber defense, incident response, or security operations.
• Experience as Tier III SOC Analyst or senior escalation resource.
• Active cybersecurity certifications (e.g., Security+, CySA+, GCIA/GCFA/CEH).

Responsibilities

• Serve as senior investigative/escalation layer for complex incidents.
• Lead containment, eradication, recovery, and post-incident analysis.
• Mentor junior analysts and guide incident response activities.
• Perform threat hunting and root-cause investigations across endpoints, networks, cloud, and identity.

Skills

SOC experience

Tier III SOC Analyst

Incident response leadership

Threat hunting

Mentoring juniors

Investigation skills

Education

Cybersecurity certifications

Tools

Splunk

Chronicle

Exabeam

Sentinel

XSOAR

Job description

Our client, a major defense contractor supporting a large-scale enterprise digital modernization initiative, is seeking SOC Analyst Tier III consultants to support the continued expansion and maturation of a corporate Security Operations Center (SOC).

This program is part of a broader enterprise transformation effort focused on Zero Trust security architecture, cyber modernization, secure collaboration, and enterprise cybersecurity operations across a 40,000-user environment.

The Tier III team serves as the senior investigative and escalation layer within the SOC, responsible for complex incident response, advanced threat analysis, threat hunting, root cause determination, and remediation strategy. These consultants will work closely with SOC leadership, incident response teams, infrastructure engineering, and cybersecurity stakeholders to identify emerging threats, improve detection capabilities, and strengthen overall security operations.

The ideal candidate combines strong technical investigation skills with the ability to mentor junior analysts, guide incident response activities, and operate effectively within highly regulated and security-focused environments.

Musts:

• 5+ years of SOC, Cyber Defense, Incident Response, or Security Operations experience
• Experience serving as a Tier III SOC Analyst, Incident Response Lead, Cyber Operations Lead, or senior escalation resource
• Security+, CySA+, GCIH, GCIA, GCFA, CEH, or similar cybersecurity certifications
• Advanced incident response experience including containment, eradication, recovery, and post-incident analysis
• Experience conducting threat hunting and root cause investigations across endpoint, network, cloud, and identity platforms
• Hands-on experience with SIEM technologies such as Splunk, Chronicle, Exabeam, Sentinel, or similar platforms
• Experience utilizing SOAR technologies such as XSOAR or similar automation and orchestration tools

Pluses:

• Experience supporting DoD, federal, defense industrial base, or highly regulated environments
• Familiarity with Zero Trust architectures and cybersecurity modernization initiatives
• Experience supporting CMMC, NIST 800-171, RMF, or related compliance frameworks
• Active Secret Clearance or recent clearance eligibility
• Experience with threat intelligence integration, detection engineering, or advanced security analytics
• Experience supporting large enterprise SOC operations with 24x7 monitoring environments