Senior SOC Lead: Incident Response & Threat Hunting

KeenLogic; Merrifield (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, dental and vision insurance

PTO

401k

Life Insurance

Job summary

KeenLogic is hiring a Senior SOC Analyst & Incident Responder for the DEA to join the 24/7/365 Security Operations Center in Merrifield, VA. This onsite role emphasizes advanced investigations, threat hunting, and coordination with forensics, engineering, and threat intelligence teams.

The ideal candidate will lead complex investigations, guide containment and remediation, and mentor junior staff while aligning with organizational security posture and playbooks.

Qualifications

• Active Secret or Top Secret clearance required.
• Master’s degree with 8+ years or Bachelor’s with 11+ years of experience.
• Documented work in Information System Security, Security Assessment & Authorization, Cybersecurity, Forensics, or Insider Threat.
• One of the listed certifications (CBROPS, CFR, CySA+/Security+CE/CASP+CE, FITSP-O, SANS GCFA/GCIA/GDSA/GICSP, CCNA-Security/CCNP Security, CISSP/CISSP Associate, CCSP, CISA, SSCP, CND).

Responsibilities

• Lead advanced incident detection, investigation, and analysis.
• Correlate SIEM, EDR, IDS/IPS, and firewall data to identify incidents.
• Perform deep-dive investigations to determine root cause, scope, and impact.
• Apply MITRE ATT&CK and other frameworks for adversary TTPs.
• Coordinate and direct complex incident response activities.
• Guide containment, eradication, and recovery with SOC, forensics, and engineering teams.
• Serve as primary escalation point for high-impact incidents.
• Develop and refine SOC processes, playbooks, and detection capabilities.

Skills

Threat hunting

Incident response

Forensic analysis

Executive briefings

Mentoring

Threat intel coordination

Education

Master’s degree

Bachelor’s degree

Active Secret or Top Secret clearance

Tools

SIEM/SOAR platforms

EDR/IDS/IPS

Firewall data analysis

Forensics tools

Job description

KeenLogic is hiring a Senior SOC Analyst & Incident Responder for the DEA to join the 24/7/365 Security Operations Center in Merrifield, VA. This onsite role emphasizes advanced investigations, threat hunting, and coordination with forensics, engineering, and threat intelligence teams.

The ideal candidate will lead complex investigations, guide containment and remediation, and mentor junior staff while aligning with organizational security posture and playbooks.