Senior SOC Analyst & Threat Hunter

Dan Cummins Ford Lincoln; Merrifield (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

NTT DATA in Merrifield, Virginia, is seeking a Senior SOC Analyst to join our 24/7/365 Security Operations Center. The role focuses on advanced investigations, incident response, threat hunting, and collaboration with forensics and engineering teams.

The ideal candidate will conduct deep forensic investigations, apply MITRE ATT&CK, and mentor SOC staff while improving detection capabilities and playbooks. This on-site position requires US citizenship and an active security clearance.

Qualifications

• Master’s degree in IT, cybersecurity, data science, information systems, or computer science from an ABET accredited or CAE designated institution.
• 8+ years of IT/IS experience.
• DoD 8140 certification or ability to obtain within 6 months of onboarding.
• Active Secret Security Clearance and US citizen.
• Must live within commuting distance to Arlington or Merrifield, VA.

Responsibilities

• Lead advanced incident detection, investigation, and analysis efforts across SIEM, EDR, IDS/IPS, and firewall data.
• Coordinate and direct complex incident response activities with SOC, forensics, and engineering teams.
• Conduct proactive threat hunting analyzing telemetry, logs, and behavioral patterns.
• Work with forensic teams to ensure proper collection, preservation, and analysis of digital evidence.
• Develop and enhance SOC processes, playbooks, and detection capabilities.

Skills

Incident response

Threat hunting

Forensic analysis

Mentoring

Communication

Education

ABET-accredited or CAE designated

Tools

SIEM

EDR

SOAR

Forensic tools

Job description

NTT DATA in Merrifield, Virginia, is seeking a Senior SOC Analyst to join our 24/7/365 Security Operations Center. The role focuses on advanced investigations, incident response, threat hunting, and collaboration with forensics and engineering teams.

The ideal candidate will conduct deep forensic investigations, apply MITRE ATT&CK, and mentor SOC staff while improving detection capabilities and playbooks. This on-site position requires US citizenship and an active security clearance.