SOC Analyst

DMI (Digital Management, Inc.); Crownsville (MD); On-site; USD 70,000 - 100,000; Full time

Job summary

DMI (Digital Management, Inc.) is seeking a SOC Analyst in Crownsville, MD. The role involves monitoring and analyzing threats, conducting threat hunting, and supporting incident response initiatives. Candidates should hold a Bachelor's degree in a technical field and possess relevant certifications like CompTIA CySA+ or Security+. Strong experience in network traffic analysis and security operations is preferred. This position requires U.S. citizenship and offers a day or night shift work schedule.

Qualifications

• Bachelor's degree from an accredited college in a technical discipline.
• CompTIA CySA+ or Security+ certification, plus one advanced certification.
• Experience with malware analysis and incident response.

Responsibilities

• Monitor and protect enterprise networks from malicious activity.
• Conduct analysis of security events and incidents.
• Prepare shift handover briefings and contribute to SOPs.

Skills

Intrusion event analysis

Threat hunting

Network security monitoring

Event correlation

Communication skills

Team collaboration

Education

Bachelor's degree in computer science or related field

Master's degree

Tools

Wireshark

Splunk

SIEM tools

Job description

SOC Analyst

Job ID: 2026-28679 | Category: Infrastructure Support | Location: US-MD-Crownsville

About the Opportunity

DMI (Digital Management, LLC.) is looking for a SOC Analyst with hands‑on experience monitoring, detecting, and analyzing threats and cybersecurity events to identify and defend against validated intrusion events. Daily work includes monitoring network and system security events, conducting threat hunting through event data and activity logs, developing alarms for suspicious or malicious activity, escalating alerts to clients, and preparing reports to summarize detected activities. The SOC Analyst executes and helps create operational processes for consistent monitoring of client environments and should be familiar with a variety of security tools and technologies. The SOC Analyst also supports the Incident Response Team by conducting monitoring and analysis during incident management engagements.

Duties and Responsibilities

• The shift is day, evening, or night shift.
• Monitor, protect, and defend the enterprise perimeter against malicious network traffic.
• Monitor, protect, and defend internal networks and hosts against ongoing and emerging threats.
• Enrich monitoring logs with contextual operation data from functional areas, correlate events, and identify security issues, threats, and vulnerabilities.
• Conduct security event analysis and validation, triage validated incidents, perform initial containment where feasible, research incident and enrich incident case documentation, and upscale incident for further analysis, containment, and eradication.
• Review and analyze threat intelligence information and proactively search application, system, network logs to hunt for and thwart relevant threats identified.
• Prepare and perform shift handover briefing to communicate completed and pending activities, and relay situational awareness information.
• Contribute to the development and maintenance of SOC Standard Operating Procedures (SOPs) and Concept of Operations (CONOPS) to establish and continuously improve organization operating knowledge base.
• Participate in post‑incident activities and contribute to lessons learned to improve security operations.
• Provide support in preparation of management threat reports and briefings, and recommendations.
• Provide sound technical recommendations that enable remediation of security issues.
• Partner with security engineering to develop and refine SIEM correlation rules.
• Utilize advanced threat models, SIEM use cases, and incident response playbooks.

Qualifications

• Bachelor's degree from an accredited college or university with a major in computer science, information systems, engineering, business, or related scientific or technical disciplines. Master's Degree is preferred.
• CompTIA CySA+ certification or a CompTIA Security+ (or other relevant IAT Level II/III Certification) along with one of the following: CEH, CFR, CCNA Cyber Ops, CCNA‑Security, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+.
• Experience analyzing intrusion events such as phishing emails, malware, privilege misuse, traffic indicating potential malicious activities such as DoS/DDoS, brute force, data loss through exfiltration/ad inadvertent disclosure.
• Applied experience of threat analysis models/frameworks such as Cyber Kill Chain, MITRE ATT&CK, Diamond Model, Pyramid of Pain.
• Working knowledge of advanced threat Tactics, Techniques and Procedures (TTPs).
• Applied experience with network traffic analysis with tools like Wireshark.
• Applied experience with a variety of open‑source threat research tools/platforms such as Virus Total.
• Working knowledge of network and security architecture principles such as defense‑in‑depth.
• Experience with proprietary security protection/detections tools such as Firewall, Host and Network IDS/IPS, Anti‑Virus, EDR, URL Filtering Gateways, Email Filtering Gateways, DLP tools, and SIEM tools such as Splunk.
• Capable of working independently, establishing priorities and managing task completion within set SLAs.
• Able to communicate effectively through writing, speaking, and presenting to client technical representatives.
• Team player capable of productively contributing to the client mission by supporting fellow teammates in a dynamic growing and changing environment.

Desired Skills and Qualifications

• Experience with intermediate to advanced level malware analysis.
• Experience creating detailed queries and scripts, such as regular expressions, for log, event and correlation analysis.
• Experience scripting in Python, PowerShell, VBScript.

Min Citizenship Status Required

Must be a U.S. Citizen.

Background Requirements

Successful completion of a Fingerprint background investigation.

Physical Requirements

None required for this position.

Location

Crownsville, MD (100% onsite). Work is day shift or night shift.