Senior SOC Analyst Tier 3 — Incident Response Lead

Rishabh RPO; Washington (District of Columbia); Sur place; USD 95 000 - 130 000; Plein temps

Résumé du poste

Rishabh RPO in Washington DC seeks a Tier 3 SOC Analyst to lead advanced incident analysis and remediation for the District government cyber infrastructure. You will oversee a team of SOC Analysts, perform root-cause detection, and coordinate responses with the Incident Response Lead.

Ideal candidate has extensive SIEM/IDS/IPS, threat intel, TCP/IP knowledge, and preferred SANS certifications. This onsite role through 2027 with potential extension offers career growth and critical defense duties.

Qualifications

• Bachelor's degree in cyber security or related field with significant incident handling experience.
• Strong understanding of threats, attacks, and countermeasures across networks and hosts.
• Hands-on with SIEM, IDS/IPS, firewalls, and endpoint protection in enterprise environments.

Responsabilités

• Monitor, detect, analyze, remediate, and report on cyber events for DC infrastructure.
• Escalate incidents to Incident Response Lead and coordinate with SOC team.
• Perform root-cause analysis and trend-based remediation recommendations.
• Tune security tools and reduce false positives through rule adjustments.
• Ingest IOCs/IOAs into security tools to protect government networks.
• Develop SOPs and Runbooks for SOC Analysts.

Connaissances

Tier 3 SOC Analyst

SIEM

Incident response

Threat intelligence

Log analysis

Network security

TCP/IP

Communication skills

Stress management

Formation

Bachelor's Degree in Cyber Security

Undergraduate degree in information technology

SANS GCIA

SANS GCED

SANS GPEN

SANS GCIH

Outils

SIEM

IDS/IPS

Firewalls

DLP

DAM

NAC

Description du poste

Rishabh RPO in Washington DC seeks a Tier 3 SOC Analyst to lead advanced incident analysis and remediation for the District government cyber infrastructure. You will oversee a team of SOC Analysts, perform root-cause detection, and coordinate responses with the Incident Response Lead.

Ideal candidate has extensive SIEM/IDS/IPS, threat intel, TCP/IP knowledge, and preferred SANS certifications. This onsite role through 2027 with potential extension offers career growth and critical defense duties.