Senior Tier 2 SOC Analyst — Advanced Threat Analysis

Leidos; Seaside (CA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an experienced Tier 2 Security Operations Center (SOC) Analyst to support the DMDC CyberPRIMES program. The role involves advanced analysis of cybersecurity events escalated from Tier 1, correlating security data, and supporting incident triage to protect DHRA systems and networks.

The position requires a Bachelor’s degree in a technical field, 5+ years of cybersecurity experience, SIEM proficiency, U.S. citizenship, and an active Secret clearance.

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT, engineering, or related field.
• 5+ years of relevant cybersecurity experience.
• Experience analyzing and correlating alerts from multiple monitoring capabilities.
• Experience investigating endpoint, network, user activity, or other cybersecurity events.
• US Citizenship and Active Secret clearance required.

Responsibilities

• Perform advanced analysis of cybersecurity events escalated from Tier 1 analysts or identified through monitoring.
• Correlate alerts and telemetry to determine nature, scope, and potential impact.
• Distinguish legitimate activity, false positives, and potential incidents.
• Support incident triage, containment, and response with the incident-response team.
• Preserve evidence and document actions, findings, and conclusions in government systems.
• Maintain complete event records and contribute to SOC reporting.

Skills

Cybersecurity event analysis

SOC operations

Incident triage

Security monitoring

Documentation

Education

Bachelor’s degree in Cybersecurity

Tools

SIEM platforms

Job description

Leidos is seeking an experienced Tier 2 Security Operations Center (SOC) Analyst to support the DMDC CyberPRIMES program. The role involves advanced analysis of cybersecurity events escalated from Tier 1, correlating security data, and supporting incident triage to protect DHRA systems and networks.

The position requires a Bachelor’s degree in a technical field, 5+ years of cybersecurity experience, SIEM proficiency, U.S. citizenship, and an active Secret clearance.