SOC Analyst - Incident Response & Threat Hunting

Leidos; Alexandria (VA); On-site; USD 87,100 - 157,450; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Retirement benefits

Job summary

Leidos' Digital sector seeks a SOC Analyst for our Alexandria, VA team. You will analyze alerts from endpoints, IDS/IPS, and netflow to identify compromises across customer networks and endpoints, and support incident investigations.

You will document findings, create incident reports, and escalate to senior staff. A DoD Top Secret clearance with SCI access and DoD 8570 certifications are required, along with 4+ years in incident response and SOC operations.

Qualifications

• Bachelor's degree and 4+ years of prior relevant experience; additional military service and/or relevant work experience may be considered in lieu of a degree.
• 2+ years of prior incident handling/response experience.
• 2+ years of experience working in a SOC environment.
• CND experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.
• Demonstrated understanding of the life cycle of network threats, attacks, attack vectors, and intrusions.
• Strong TCP/IP, ports and protocols knowledge; OSI model and defense-in-depth concepts.

Responsibilities

• Utilize alerts from endpoints, IDS/IPS, netflow, and custom sensors to identify compromises on customer networks and endpoints.
• Perform intermediate-level review of massive log files, pivot between data sets, and correlate evidence for incident investigations.
• Pass triaged alerts to senior-level SOC personnel and assist in identifying malicious actors on customer networks.
• Document analysis, findings, and actions in a case/knowledge management system.
• Create and distribute incident reports to customers and higher headquarters.

Skills

SOC operations

Incident response

Threat analysis

Networking fundamentals

Documentation & reporting

Communication skills

Education

Bachelor's degree in a related field

Job description

Leidos' Digital sector seeks a SOC Analyst for our Alexandria, VA team. You will analyze alerts from endpoints, IDS/IPS, and netflow to identify compromises across customer networks and endpoints, and support incident investigations.

You will document findings, create incident reports, and escalate to senior staff. A DoD Top Secret clearance with SCI access and DoD 8570 certifications are required, along with 4+ years in incident response and SOC operations.