Senior SOC Operations Analyst - Incident Response

Peraton; Warrenton (VA); On-site; USD 90,000 - 140,000; Full time

Job summary

Peraton in Warrenton, VA, seeks a Senior SOC Operations Analyst to manage incident triage and SOC operations within Federal Strategic Cyber programs. The role focuses on identifying cyber impacts to IT assets, networks, and ensuring incident management and coordination.

Responsibilities include leading containment and remediation efforts, QA of service desk actions and Remedy submissions, and collaboration with other incident response teams to understand threats and vulnerabilities for client

Qualifications

• Bachelor’s degree and 8+ years of relevant experience required.
• Experience with Netflow/PCAP analysis.
• Knowledge of cyber forensics concepts including malware and hunt.
• Understanding of how Windows and Linux systems are compromised.
• U.S. citizenship required.
• Ability to obtain a Public Trust security clearance.
• Travel up to 25% may be required.

Responsibilities

• Manage incident triage and coordination to analyze technology and cyber impacts to IT assets and networks.
• Direct continuity of operations for 24x7x365 security operations.
• Organize containment, investigation, and remediation of incidents.
• QA of service desk actions and Remedy ticket submissions; monitor and catalog SOC/SIM emails.
• Support incident response engagements and coordinate with external incident response teams.
• Monitor multiple data sources to identify cybersecurity incidents, threats, and vulnerabilities.
• Provide classified and unclassified cyber risk briefings to civilian agencies and stakeholders.
• Coordinate with external organizations and senior leadership as needed.

Skills

Netflow/PCAP analysis

Cyber forensics concepts

Windows/Linux compromise understanding

Travel up to 25%

Education

Bachelor’s degree

Tools

Splunk

Remedy

Job description

Peraton in Warrenton, VA, seeks a Senior SOC Operations Analyst to manage incident triage and SOC operations within Federal Strategic Cyber programs. The role focuses on identifying cyber impacts to IT assets, networks, and ensuring incident management and coordination.

Responsibilities include leading containment and remediation efforts, QA of service desk actions and Remedy submissions, and collaboration with other incident response teams to understand threats and vulnerabilities for client