Senior SOC Analyst - Incident Response Lead

AHU Technologies Inc.; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

AHU Technologies Inc. is seeking a Tier 3 SOC Analyst to provide advanced analytical oversight for a team monitoring the Government of the District of Columbia's cyber infrastructure. You will lead incident analysis, triage, and remediation, ensuring timely detection and response to threats across enterprise systems.

The role requires extensive SIEM experience, hands-on incident handling, and mentoring of Tier 2 analysts, with strong communication and reporting skills to leadership.

Qualifications

• Bachelor's degree and at least five years of operational experience as a cybersecurity analyst/engineer in a SOC.
• Experience leading a SOC team or unit for incident analysis and escalation.
• Strong understanding of threats, exploits, and incident response procedures.

Responsibilities

• Scrutinize escalated cybersecurity events from Tier 2 analysts and escalate confirmed incidents to the Incident Response Lead.
• Analyze large datasets of logs and alerts to identify and remediate cybersecurity incidents.
• Search for undetected threats across logs, networks, and systems.
• Tune security tools and reduce false positives; develop response procedures.
• Ingest indicators of compromise and IOAs into security tools.
• Coordinate with enterprise staff to resolve incidents and report trends to SOC management.
• Develop SOPs and Runbooks for SOC Analysts.

Skills

SOC Analyst Expertise

SIEM Proficiency

IDS/IPS Knowledge

Threat Intelligence

Incident Response Leadership

Education

Bachelor's Degree in Cyber Security or related field

GCIA/GCED/GPEN/GCIH certifications

Tools

IDS/IPS software

Firewalls

EDR/Endpoint protection

Job description

AHU Technologies Inc. is seeking a Tier 3 SOC Analyst to provide advanced analytical oversight for a team monitoring the Government of the District of Columbia's cyber infrastructure. You will lead incident analysis, triage, and remediation, ensuring timely detection and response to threats across enterprise systems.

The role requires extensive SIEM experience, hands-on incident handling, and mentoring of Tier 2 analysts, with strong communication and reporting skills to leadership.