Senior SOC Analyst (Remote) — Threat Hunting & SIEM Lead

Peraton; Reston (VA); Remote; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Senior SOC Analyst to support the Department of State CAEIO program. You will monitor security events, hunt threats, analyze logs, and coordinate incident response across global networks using Splunk and Microsoft Sentinel.

This role emphasizes collaboration with multiple teams and mentoring junior staff. The position offers a fully remote schedule with occasional onsite activities in the DMV area.

Qualifications

• U.S. citizenship with active SECRET clearance.
• 5+ years in cybersecurity, SOC, or systems security in federal settings.
• Experience with SIEM platforms (prefer Splunk) and logs.
• Knowledge of RMF/NIST and cyber threat analysis.

Responsibilities

• Monitor and investigate security alerts; perform threat hunting and incident reporting.
• Analyze network traffic to identify anomalous activity and threats.
• Create advanced SPL queries for security analytics.
• Coordinate with teams to investigate threats and conduct forensics.
• Review logs from host, network, firewall, and IDS sources.
• Utilize SIEM and EDR tools to monitor operations.
• Develop configuration standards, policies, and procedures.
• Advise management on risks and mitigations; mentor junior staff.
• Prepare reports detailing investigations and security activities.
• Identify attack tactics and improve monitoring solutions.
• Protect and refine SOC processes; document SOPs.
• Lead SOC-related projects and training; communicate with leadership.

Skills

Cybersecurity

SOC operations

SIEM

Threat analysis

Splunk

EDR

Network traffic

Regex

Education

Bachelor's degree

Master's degree

Associate degree

High School diploma

Tools

Splunk

Microsoft Sentinel

SPL

Job description

Peraton is seeking a Senior SOC Analyst to support the Department of State CAEIO program. You will monitor security events, hunt threats, analyze logs, and coordinate incident response across global networks using Splunk and Microsoft Sentinel.

This role emphasizes collaboration with multiple teams and mentoring junior staff. The position offers a fully remote schedule with occasional onsite activities in the DMV area.