Senior SOC Analyst IV - Threat Detection & IR

True Zero Technologies; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Job summary

True Zero Technologies in Washington, DC seeks an experienced SOC Analyst IV to provide advanced cybersecurity monitoring, threat detection, incident investigation, and response support within complex federal environments.

This senior role serves as a technical escalation point for SOC activities, leading sophisticated investigations, analyzing emerging threats across Windows, Linux, networks and cloud, and helping strengthen SOPs, playbooks, and detection capabilities across enterprise systems.

Qualifications

• Minimum 6 years in SOC operations or related security disciplines.
• Experience performing advanced incident investigations and escalation.
• Hands-on SIEM, EDR, and cloud security monitoring experience.
• Strong knowledge of Windows and Linux, networking, and cloud security (AWS).
• Proven ability to document findings and communicate to technical and federal stakeholders.
• Security clearance required for High Risk/Public Trust positions.

Responsibilities

• Advanced Security Monitoring & Incident Response: Provide Tier III SOC support for triage, investigations, forensics, and escalation of advanced threats across federal environments.
• Threat Detection & Analysis: Analyze SIEM alerts, endpoint telemetry, network traffic, and threat intel to identify malicious activity and containment actions.
• SOC Tools & Situational Awareness: Maintain visibility into SOC security technologies, monitoring platforms, log sources, and telemetry.
• Incident Investigation & Escalation: Lead investigations, correlate events across data sources, perform root cause analysis, and coordinate escalation with cybersecurity stakeholders.
• SOC Operations & Process Improvement: Lead handovers, maintain incident documentation, and develop/update SOPs and playbooks to improve efficiency.
• Red Team & Purple Team Collaboration: Support exercises, evaluate detection capabilities, identify gaps, and recommend improvements to procedures.
• Technical Leadership & Knowledge Sharing: Mentor junior analysts and drive improvements in threat detection and incident handling.

Skills

SOC operations

Threat detection

Incident response

SIEM

EDR

Windows

Linux

AWS security

Technical communication

Security clearance

Tools

SIEM platforms

EDR technologies

Job description

True Zero Technologies in Washington, DC seeks an experienced SOC Analyst IV to provide advanced cybersecurity monitoring, threat detection, incident investigation, and response support within complex federal environments.

This senior role serves as a technical escalation point for SOC activities, leading sophisticated investigations, analyzing emerging threats across Windows, Linux, networks and cloud, and helping strengthen SOPs, playbooks, and detection capabilities across enterprise systems.