SOC Analyst

Steampunk; McLean (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Steampunk is seeking a skilled SOC Analyst to monitor and respond to security threats. The role requires a strong understanding of cybersecurity practices, analytical skills, and the ability to work under pressure. The ideal candidate will contribute to protecting critical systems and enhancing detection measures in a dynamic environment.

Qualifications

• 5+ years of experience in a similar role.
• Hands-on experience in incident response and threat hunting.
• Experience with analyzing log files.

Responsibilities

• Continuously monitoring security alerts and logs.
• Analyzing suspicious activities to identify security risks.
• Preparing detailed reports on security incidents.

Skills

Communication

Analytical Skills

Problem-Solving

Networking Protocols

Incident Response

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM tools (e.g., Splunk, DataDog)

Firewall and IDS/IPS tools

Job description

Overview

We are seeking a skilled and proactive SOC Analyst to join our team. Be an agent of change on a team committed to achieving client-focused, mission-driven excellence. Steampunk is the explosive collision of human-centered design and traditional government contracting. We are an employee-owned company with a startup mindset and time-tested approaches tailored for the federal government.We’repassionate about creating solutions that are impactful, practical, and scalable while meeting our clients’ ever-changing needs. We believe in empowering our people to find creative solutions to intractable problems. We believe the best environment in which to grow and thrive is outside our comfort zone. We believe that whilegood designmakes fora good product, human-centered design makes for an excellent one.

Contributions

This role involves monitoring, analyzing, and responding to security threats and incidents to protect the client’s critical systems and data. The ideal candidate has a strong understanding of cybersecurity practices, excellent problem-solving skills, and the ability to perform under pressure. Responsibilities include:

• Continuously monitoring security alerts and logs from various systems and tools.
• Analyzing and investigating suspicious activities to identify security risks.
• Responding to and managing security incidents following established protocols.
• Coordinating with internal teams to contain and remediate incidents.
• Staying updated on the latest cybersecurity threats and trends.
• Applying threat intelligence to enhance detection and prevention measures.
• Assisting in maintaining and improving SOC tools, technologies, and processes.
• Performing regular system audits and vulnerability assessments.
• Preparing detailed reports on security incidents, findings, and resolutions.
• Contributing to the development of playbooks and knowledge bases.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field or equivalent education and/or experience.
• 5+ years of experience in a similar role.
• In-depth understanding of the benefits and limitations of firewalls, intrusion detection systems, and security information and event management (SIEM) systems.
• Experience with SIEM tools (e.g., Splunk, DataDog).
• Hands-on experience in incident response and threat hunting.
• Proficiency in networking protocols and cybersecurity principles.
• Familiarity with firewalls, IDS/IPS, endpoint protection, and forensic tools.
• Strong understanding of attack methodologies and frameworks (e.g., MITRE ATT&CK).
• Experience with troubleshooting and analyzing various technologies (OS, network logs, vendor logs, etc.).
• Experience analyzing log files.
• Assign severity levels (high, medium, low) to security alert notifications.
• Experience with operating systems (Windows, Linux).
• Excellent communication and collaboration skills.
• Advanced analytical skills (i.e., using data to identify trends and make recommendations).
• Performing Root Cause Analysis and make recommendations.
• Ability to work in a high-pressure environment.

Preferred Skills

• Experience in cloud security and related tools (GCP, AWS, Azure).
• Knowledge of scripting languages (Python, PowerShell, etc.).
• Relevant certifications such as Certified SOC Analyst (CSA), CompTIA Security+, CompTIA CySA+, Certified Information Systems Security Professional (CISSP), and Certified Ethical Hacker (CEH).
• Experience with network penetration tests/tools.

About steampunk

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers – and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.Steampunk participates in the E-Verify program.