Senior SOC Analyst: Incident Response & Threat Analysis

CloudAI Technologies; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

CloudAI Technologies is seeking a cybersecurity analyst to scrutinize escalated events from Tier 2, provide corrective analysis, and escalate confirmed incidents to the Incident Response Lead. You will analyze logs and alerts from diverse devices, identify threats, and develop remediation strategies for the Government of the District of Columbia network.

Responsibilities include tuning security tools, ingesting IOCs/IOAs, and coordinating expert support across enterprise teams.

Qualifications

• Bachelor's degree in Cyber Security or related field with minimum five years of operational experience handling cybersecurity incidents in critical environments.
• In-depth understanding of threats and countermeasures for DDoS, phishing, ransomware, botnets, C2 activities.
• Experience with SIEM, IDS/IPS, firewalls, NAC, DLP, vulnerability scanners, and endpoint protection.

Responsibilities

• Coordinate IT project management, engineering, maintenance, QA, and risk management.
• Plan, coordinate, and monitor security activities and incidents.
• Develop and support technical applications to assist users.
• Develop and enforce standards for design, development, and documentation of systems.

Skills

SIEM

IDS/IPS

Firewalls

NAC

DLP

DAM

Threat intelligence

Log analysis

Incident response

Communication

TCP/IP networking

Forensic analysis

Scripting (PowerShell/Perl)

Education

Bachelor's degree in Cyber Security or related field

Undergraduate degree in computer science, information technology, or related field

SANS GCIA, GCED, GPEN, GCIH or similar certification desired

Tools

SIEM

IDS/IPS

Web & Email filtering

Vulnerability scanning tools

Endpoint protection

DAM

Job description

CloudAI Technologies is seeking a cybersecurity analyst to scrutinize escalated events from Tier 2, provide corrective analysis, and escalate confirmed incidents to the Incident Response Lead. You will analyze logs and alerts from diverse devices, identify threats, and develop remediation strategies for the Government of the District of Columbia network.

Responsibilities include tuning security tools, ingesting IOCs/IOAs, and coordinating expert support across enterprise teams.