SOC Analyst II | 24/7 Cyber Defense (TS/SCI)

General Dynamics Information Technology (GDIT); Colorado Springs (CO); On-site; USD 113,000 - 137,000; Full time

Job summary

General Dynamics Information Technology (GDIT) is seeking a SOC Analyst to provide 24×7 monitoring and response for government networks. The role requires strong cyber defense expertise, familiarity with SIEM and endpoint tools, and experience in SAP/Sci environments.

Applicants should have 5+ years in related roles and a TS/SCI clearance with polygraph. The position emphasizes incident handling, threat hunting, and collaboration across Security Operations workflows.

Qualifications

• Bachelor’s degree in a related area OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years)

Responsibilities

• Provide 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.
• Conduct security event monitoring, advanced analytics and response activities in support of the government’s mission.
• Triage, incident handling, hunting for anomalous patterns and malware analysis.
• Analyze security events to distinguish incidents from non-incidents and implement countermeasures.
• Work with Security Information and Event Management platforms and log management systems for correlation and alerting.
• Maintain knowledge of Windows, Linux/OS X, AD concepts, and network protocols.
• Collaborate within SAPs and support day-to-day activities in collateral and SCI/SAP environments.

Skills

Cybersecurity

Information Security

System Security

Education

Bachelor’s degree

Associate’s degree + 2 years

Tools

SIEM

Log Management

IDS

Job description

General Dynamics Information Technology (GDIT) is seeking a SOC Analyst to provide 24×7 monitoring and response for government networks. The role requires strong cyber defense expertise, familiarity with SIEM and endpoint tools, and experience in SAP/Sci environments.

Applicants should have 5+ years in related roles and a TS/SCI clearance with polygraph. The position emphasizes incident handling, threat hunting, and collaboration across Security Operations workflows.