SOC Analyst: Cyber Defense & Incident Response (Secret)

conceptplus; United States; On-site; USD 70,000 - 110,000; Full time

Job summary

Concept Plus is seeking a SOC Analyst to support the Enterprise Cybersecurity Operations team. You will monitor basic indicators of suspicious activity, triage events with Splunk/Sentinel, and help maintain the security posture of mission-critical systems in line with FISMA/NIST and DoD standards.

You will review alerts, assist in incident response, and participate in threat research under senior staff guidance.

Qualifications

• US Citizen with active Secret clearance.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience)
• Exposure to Microsoft Defender
• Understanding of TCP/IP, basic networking concepts, OSI model, and common security terminology
• Exposure to SIEM platforms (Splunk or Sentinel) or vulnerability scanning tools such as ACAS
• Ability to write or interpret simple SPL or KQL queries (or willingness to learn quickly)
• Understanding of common cyber threats, malware behavior basics, and alert triage concepts
• Strong analytical skills and willingness to learn in a fast paced SOC environment
• DoD 8140 Certification Requirements
• Must meet IAT Level II baseline (Security+ CE, CySA+, CASP+, GSEC, SSCP, CND, CCNA Security, CCNP Security, CCSP, CISA, CISSP or Associate)
• Compliant for CSSP Analyst within 6 months of hire (CEH, CySA+, GCIA, GCIH, GICSP, PenTest+, Cloud+, CFR, CCNA Cyber Ops, SCYBER)

Responsibilities

• Monitor network, host, and security systems for basic indicators of suspicious activity and escalations.
• Use approved cybersecurity tools (e.g., Splunk/Sentinel, ACAS) to conduct initial event triage and support vulnerability identification.
• Assist with reviewing alerts, IDS/IPS notifications, antivirus logs, and host based security findings.
• Support incident response activities by gathering data, documenting observations, and preparing reports for senior analysts.
• Assist in evaluating system updates or deployments for potential cybersecurity impacts.
• Participate in threat research, correlation activities, and SOC process improvement efforts under the guidance of senior staff.
• Maintain awareness of emerging threats, cybersecurity best practices, and DoD security requirements

Skills

Strong analytical skills

Willingness to learn quickly

Ability to write or interpret SPL/KQL

Education

Bachelor’s degree in CS/IT/Cybersecurity or related field

Tools

Splunk

Sentinel

ACAS

Microsoft Defender

Job description

Concept Plus is seeking a SOC Analyst to support the Enterprise Cybersecurity Operations team. You will monitor basic indicators of suspicious activity, triage events with Splunk/Sentinel, and help maintain the security posture of mission-critical systems in line with FISMA/NIST and DoD standards.

You will review alerts, assist in incident response, and participate in threat research under senior staff guidance.