Senior SOC Analyst

VulnU; Washington, Sterling (District of Columbia, VA); Remote; USD 104,000 - 166,000; Full time

Benefits offered by this job

25 days PTO

Job summary

Peraton is seeking a Senior SOC Analyst to join the Department of State (DOS) CAEIO program. This remote role prioritizes candidates in the Washington, DC area for occasional onsite needs. Expect to monitor security alerts, conduct threat hunting, and develop SOC processes while coordinating across teams and leadership.

Required are a US citizenship, active SECRET clearance, and 5+ years in cybersecurity/SOC with Splunk and Sentinel expertise. Competitive salary and benefits offered.

Qualifications

• Bachelor's degree with 8+ years of experience, or Master's with 6+ years, or Associate with 10+ years, or HS diploma with 12+ years.
• U.S. citizenship and active SECRET clearance.
• Security+ CE or other DoD 8570 IAT Level II certification.
• 5+ years of cybersecurity, SOC, or systems security experience in a federal government environment.
• 3+ years experience with a SIEM platform, preferably Splunk.
• Experience using Splunk dashboards and Microsoft Sentinel for security monitoring and analysis.
• 4+ years of experience querying and analyzing security data, including SPL.
• Knowledge of TCP/IP, networks, ports, protocols, and traffic flow.
• Familiarity with RMF and NIST standards (e.g., SP 800-53).

Responsibilities

• Monitor and investigate security alerts, perform threat hunting, and notify designated managers and responders.
• Analyze network traffic to identify anomalous activity and potential threats.
• Create advanced SPL queries.
• Coordinate with internal and external teams to investigate threats and conduct forensic analysis.
• Review and analyze logs from host, network, firewall, and IDS sources.
• Utilize SIEM and EDR tools to monitor the operational environment.
• Develop and document configuration standards, policies, and procedures.
• Advise management on technology risks and mitigation strategies.
• Prepare reports detailing investigations and incidents.
• Identify and classify attack techniques.
• Build and refine SOC processes and SOPs.
• Train and mentor junior SOC team members.
• Plan and execute SOC-related projects and initiatives.
• Communicate clearly with managers and colleagues.
• Demonstrate flexibility and willingness to take on additional responsibilities.

Skills

Security+ CE

SOC operations

Splunk

Microsoft Sentinel

SPL queries

EDR tools

TCP/IP networking

NIST RMF / NIST SP 800-53

MITRE ATT&CK

Cloud security

Scripting

Linux/Windows

WAF security features

Education

Bachelor's degree

Master's degree

Associates degree

High School diploma/equivalent

Tools

Splunk

Microsoft Sentinel

EDR tools

SIEM platforms

Job description

# Senior SOC AnalystPeraton · peraton.comCategory: Detection & ResponseLocation: RemoteLevel: SeniorSalary: $104,000 – $166,000Clearance: Secret## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* 25 days PTOResponsibilitiesPeraton is seeking a Senior SOC Analyst to join our team of qualified and diverse individuals on our Department of State (DOS) Bureau of Diplomatic Technology (DT) Consular Affairs Enterprise Infrastructure Operations (CAEIO) program. CAEIO provides IT Operations and Maintenance to modernize the legacy networks, applications, and databases supporting consular applications and services globally.Core Work Schedule: First and weekend: 7:00AM – 3:30PM EST, Saturday – WednesdayLocation: This position is fully remote; however, preference will be given to candidates local to the Washington, DC, metropolitan area (DMV) for occasional onsite meetings, training sessions, or customer support activities at the Washington, DC, customer location or the Peraton office in Sterling, VA.The number of days the SOC Analyst works on-site in Washington, DC, or Sterling, VA, is subject to change based on government/program requirements (for example, surge support might require the individual to be in the office five days per week).Day to Day Responsibilities:Monitor and investigate security alerts, perform threat hunting, and notify designated managers, cyber incident responders, and cybersecurity service provider personnel of suspected incidents. Clearly articulate event history, status, and potential impact in accordance with the organization’s cyber incident response plan.Analyze and characterize network traffic to identify anomalous activity and potential threats to network resources.Create advanced ad hoc SPL queries.Coordinate with internal and external teams to investigate threats, assess risks, and conduct forensic analysis.Review and analyze log files from various sources (host logs, network traffic logs, firewall logs, IDS logs) to identify potential security threats.Utilize SIEM and EDR tools to monitor the operational environment.Develop and document configuration standards, policies, and procedures to operate, manage, and secure system infrastructure.Advise management and team members on technology risks and recommend mitigation strategies.Engage with multiple levels of management, providing technical expertise and thought leadership.Prepare reports detailing investigations, incidents, and other security-related activities.Identify and classify attack tactics and techniques.Recommend and implement enhancements to improve system performance, security, and reliability.Build and refine SOC processes and procedures, including documenting work in SOPs.Train and mentor junior SOC team members.Plan and execute SOC-related projects and initiatives.Communicate clearly and professionally with managers and colleagues.Demonstrate flexibility and an eagerness to take on additional responsibilities as needed.QualificationsBasic Qualifications:Bachelors degree and 8 years of experience or a Masters degree and 6 years of experience or an Associates degree and 10 years of experience or a High School diploma/equivalent and 12 years of experience.U.S. citizenship and an active SECRET security clearanceMust have a Security+ CE or other DoD 8570 IAT Level II certification.5+ years of cybersecurity, SOC, or systems security experience in a federal government environment supporting business critical, high-availability systems.3+ years experience working with a SIEM platform, preferably Splunk.Experience using Splunk (or similar) dashboards and Microsoft Sentinel for security monitoring and analysis.4+ years of experience querying and analyzing security data, including SPL, with a working understanding of data types, conditions, and regular expressions.Working knowledge of system, network, and application security threats and vulnerabilities, with the ability to support the development and improvement of monitoring solutions.Understanding of Boolean logic and event correlation.Experience identifying logging and monitoring gaps and supporting efforts to improve security monitoring.Working knowledge of cybersecurity incidents, anomaly analysis, log analysis, digital forensics, and common threat vectors.Understanding of TCP/IP, UDP, network ports, protocols, and traffic flow.Familiarity with cybersecurity frameworks and specifications, including RMF and NIST standards, such as NIST SP 800-53.Familiarity frameworks and specifications, including RMF and NIST standards (e.g., NIST SP 800-53)Preferred Qualifications:Experience with Splunk data normalization (field aliases, calculated fields, field extractions)Splunk Power User certification or higherExperience tracking incidents using the MITRE ATT&CK frameworkKnowledge of cloud securityExperience with system administration, networking, and operating system hardening techniquesMixed OS experience (Linux, Windows)Experience troubleshooting storage-related issuesScripting or coding experienceKnowledge of Web Application Firewall (WAF) security featuresPeraton OverviewPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.Target Salary Range$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEOEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.