SOC Analyst

Leidos Inc; Alexandria (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Leidos' Digital sector in Alexandria, VA seeks SOC Analysts to join our team on a continuing basis. This role requires on-site shifts in a 24/7 SOC, with a minimum DoD Top Secret clearance and SCI eligibility.

Candidates should have 2+ years of incident handling/response and SOC experience to support customer networks, endpoints, and incident reporting. Responsibilities include correlating evidence from alerts and logs, conducting intermediate log analysis, and documenting actions in knowledge

Qualifications

• Must have 2+ years of incident handling/response experience in a SOC environment.
• Bachelor's degree and 4+ years of relevant experience; additional military service may be considered in lieu of degree.
• Active DoD Top Secret clearance with ability to obtain SCI.
• DoD 8570 IAT II or higher certification (e.g., Security+ CE, SSCP, GSEC) prior to starting.
• DoD 8570 CSSP-Analyst certification (e.g., CEH, CySA+, GCIA) within 6 months of starting.

Responsibilities

• Utilize alerts from endpoints, IDS/IPS, netflow, and sensors to identify compromises on customer networks/endpoints.
• Review large log files, pivot between data sets, and correlate evidence for incidents.
• Pass triaged alerts to senior SOC personnel and assist in identifying malicious actors.
• Document analysis, findings, and actions in a case/knowledge management system.
• Create and distribute incident reports to customers and higher headquarters.

Skills

Incident handling

SOC experience

Log analysis

Education

Bachelor's degree

Job description

Description

Leidos' Digital sector has frequent opportunities available for SOC Analysts to join our team in Alexandria, VA. We recruit for these positions on a regular basis, and our recruiting team will contact candidates as positions become available.

Applicants must be comfortable supporting shift work in a 24/7 environment, have a minimum Top Secret clearance with ability to obtain SCI, and have at least 2 years of incident handling/response experience in a SOC environment.

Primary Responsibilities

• Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks/endpoints.
• Perform intermediate-level review of massive log files, pivot between data sets, and correlate evidence for incident investigations.
• Pass triaged alerts to senior-level SOC personnel and assist in identifying malicious actors on customer networks.
• Document analysis, findings, and actions in a case/knowledge management system.
• Creation and distribution of incident reports to customers and higher headquarters.

Required Clearance and Certifications

• Must have an active DoD Top Secret clearance with ability to obtain SCI.
• Must have DoD 8570 IAT II or higher certification (such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC, etc.) prior to starting.
• Must be able to obtain DoD 8570 CSSP-Analyst certification (such as CEH, CySA+, GCIA, etc.) within 6 months of starting.

Required Qualifications

• Must be willing to perform shift work on site; all shifts include weekend hours and inclement weather (SOC is deemed mission essential personnel).
• Bachelor's degree and 4+ years of prior relevant experience; additional military service and/or relevant work experience may be considered in lieu of degree.
• 2+ years of prior incident handling/response experience.
• 2+ years of experience working in a SOC environment.