Senior SOC Ops Analyst: Incident Response & Forensics

Peraton; Warrenton (VA); On-site; USD 86,000 - 138,000; Full time

Job summary

Peraton in Warrenton, VA seeks a Senior SOC Operations Analyst to join its Federal Strategic Cyber programs. The role involves incident triage, 24x7x365 operations continuity, containment, and remediation across IT assets, networks, and security tooling.

The candidate will monitor data sources, support incident response, and provide cyber risk briefings to civilian agencies and stakeholders, with travel up to 25% and a requirement for US citizenship.

Qualifications

• Bachelor’s degree and 8+ years of relevant experience; 4 additional years may substitute for degree.
• Experience with network analytics including Netflow and PCAP.
• Familiarity with cyber forensics concepts and how Windows and Linux systems are compromised.
• U.S. citizenship and ability to obtain a Public Trust clearance.
• Willingness to travel up to 10-25%.

Responsibilities

• Manage incident triage and coordination to identify and analyze cyber impacts on IT assets and networks.
• Direct continuity of operations for 24x7x365 operations, including telecommunications, systems, and cybersecurity.
• Organize, support, and manage containment, investigation, and remediation of incidents.
• Perform QA of service desk actions and manage Remedy ticket flow to prevent backlogs.
• Support incident response engagements and coordinate with other teams to understand threats and exploits.
• Monitor multiple data sources (intelligence, media, law enforcement) for cyber incidents and vulnerabilities.
• Provide classified and unclassified cyber risk briefings to civilian agencies and stakeholders.
• Coordinate with external organizations and senior leadership as required.

Skills

Netflow analysis

PCAP analysis

Cyber forensics

Windows/Linux security

Education

Bachelor's degree

GCFA

GREM

GCIH

Tools

Splunk

Job description

Peraton in Warrenton, VA seeks a Senior SOC Operations Analyst to join its Federal Strategic Cyber programs. The role involves incident triage, 24x7x365 operations continuity, containment, and remediation across IT assets, networks, and security tooling.

The candidate will monitor data sources, support incident response, and provide cyber risk briefings to civilian agencies and stakeholders, with travel up to 25% and a requirement for US citizenship.