SOC Analyst: Threat Detection & Incident Response

DMI; Crownsville (MD); Hybrid; USD 76,000 - 93,000; Full time

Benefits offered by this job

Tuition assistance

401(k) match

Healthcare coverage

Hybrid work schedule

Annual performance reviews

Job summary

DMI, LLC seeks a Security Operations Center (SOC) Analyst with hands‑on threat monitoring and incident analysis to defend client environments. You will design alarms, correlate events, and escalate alerts while supporting the incident response team.

The role emphasizes developing SIEM rules, performing threat hunting, and creating concise incident documentation for leadership and clients.

Qualifications

• 5–8 years of relevant security operations experience.
• Bachelor’s degree in CS/IS/Engineering; Master’s preferred.
• Certifications such as CySA+/Security+ and related IAT levels.
• Experience with threat analysis models and log correlation.

Responsibilities

• Monitor and analyze security events; triage and validate incidents.
• Develop SIEM rules, perform threat hunting, and escalate alerts.
• Prepare management threat reports and client briefings.
• Support incident response with containment and remediation.
• Document SOPs/CONOPS and share lessons learned.
• Collaborate with security engineering on tool tuning.

Skills

Threat hunting

SIEM

Incident response

Network security

Threat intelligence

Communication

Documentation

Education

Bachelor's degree in CS/IS/Engineering

Master's degree preferred

Tools

Wireshark

VirusTotal

Splunk

EDR/Firewall/IDS-IPS

Job description

DMI, LLC seeks a Security Operations Center (SOC) Analyst with hands‑on threat monitoring and incident analysis to defend client environments. You will design alarms, correlate events, and escalate alerts while supporting the incident response team.

The role emphasizes developing SIEM rules, performing threat hunting, and creating concise incident documentation for leadership and clients.