SOC Analyst Tier 2: Incident Response & Forensics

Quantum Sky; Washington (District of Columbia); On-site; USD 125,000 - 135,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a Tier 2 SOC Analyst to support a federal government client in Washington, DC. The role requires working in a 24x7 SOC environment with a shift pattern and strong incident response skills.

You will mentor two junior SOC analysts, monitor traffic, collect evidence, perform triage, and coordinate remediation with stakeholders. Familiarity with Windows/Linux, SIEM, and PCAP/log analysis is essential.

Qualifications

• Bachelor’s degree or 3+ years cybersecurity experience.
• IAT Level I certification required (8570 baseline).
• Familiarity with Tier 1 duties and how they feed into Tier 2 teams.

Responsibilities

• Provide task management and technical guidance to 2 junior SOC analysts.
• Monitor network traffic for security events and perform triage analysis.
• Respond to computer security incidents by collecting, analyzing, and preserving digital evidence.
• Collaborate with teams to assess risk and improve security posture.
• Conduct host forensics, EDR, log analysis, and network forensics.
• Support malware analysis and incident response efforts.
• Identify attacker tactics and indicators of compromise to improve monitoring.
• Reconstruct malicious activity from network data to map events.
• Work with stakeholders to implement remediation plans after incidents.
• Generate end-of-shift reports for knowledge transfer.

Skills

IAT Level I

Strong communication

Threat intelligence

PCAP/log analysis

Incident response

Education

Bachelor’s degree or 3+ years cybersecurity experience

Job description

Quantum Sky is seeking a Tier 2 SOC Analyst to support a federal government client in Washington, DC. The role requires working in a 24x7 SOC environment with a shift pattern and strong incident response skills.

You will mentor two junior SOC analysts, monitor traffic, collect evidence, perform triage, and coordinate remediation with stakeholders. Familiarity with Windows/Linux, SIEM, and PCAP/log analysis is essential.