Senior SOC Analyst: Threat Response & Incident Leadership

Booz Allen Hamilton; Honolulu (HI); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking a Senior Cybersecurity Operations Center Analyst to lead threat monitoring, threat intelligence integration, and rapid incident response for mission-critical workloads.

You will guide investigations, refine detection rules, and coordinate with senior leadership to minimize dwell time and ensure secure recovery. Strong DoD-aligned SOC experience and TS/SCI clearance are required.

Qualifications

• 7+ years in a Security Operations Center (SOC) at a classified level within the DoW
• Experience leading every phase of the incident lifecycle including rapid triage and containment strategies
• Experience refining and maturing SOC standard operating procedures
• Ability to manage post‑compromise activities and generate After‑Action Reports
• Primary focal point for active incident response operations with clear stakeholder communication
• TS/SCI clearance
• Bachelor's degree
• 8570 CSSP Analyst or Incident Responder Certification

Responsibilities

• Lead a team of professionals using cyberspace capabilities to evaluate weaknesses and mitigations
• Analyze threats, aggregate threat feeds, and brief senior leadership
• Develop and refine detection rules to maximize high‑fidelity alerts and reduce false positives
• Coordinate incident response activities and document lessons learned in AARs

Skills

SOC experience

Incident lifecycle

Threat detection

SOPs development

Post‑compromise management

Incident coordination

TS/SCI clearance

Bachelor's degree

8570 CSSP baseline cert

Education

Bachelor's degree

Tools

Elastic

Endpoint tools

GCFA/GNFA

Digital forensics

Threat hunting

Job description

Booz Allen Hamilton is seeking a Senior Cybersecurity Operations Center Analyst to lead threat monitoring, threat intelligence integration, and rapid incident response for mission-critical workloads.

You will guide investigations, refine detection rules, and coordinate with senior leadership to minimize dwell time and ensure secure recovery. Strong DoD-aligned SOC experience and TS/SCI clearance are required.