SOC Analyst (TS/SCI) – Aerospace Security

Apex; Los Angeles (CA); On-site; USD 88,000 - 121,000; Full time

Benefits offered by this job

Equity

Healthcare

PTO

401(k)

Parental leave

Lunch provided

Office events

Job summary

Apex is seeking a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will work with alerts, logs, vulnerabilities, and investigations to determine what happened and what to do next.

The role requires active TS/SCI clearance, US citizenship, and 2+ years in a SOC or related security operations role, with hands-on experience using EDR, SIEM, and cloud telemetry in a fast-paced aerospace

Qualifications

• Active TS/SCI clearance required at time of hire.
• US Citizenship required.
• 2+ years of experience in SOC, incident response, threat detection, endpoint security, vulnerability management, or similar role.
• Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry.
• Working knowledge of Windows and Linux, authentication, and cloud logging.
• Ability to write useful search queries in SIEM or log-analysis platforms.

Responsibilities

• Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.
• Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
• Escalate incidents based on affected systems, severity, and CUI impact.
• Collaborate with IT, Cybersecurity, and Network teams on security findings.
• Document incidents, resolutions, and potentially affected assets.
• Maintain logging reviews and incident response documentation with IT.

Skills

SOC experience

Incident response

Threat detection

Endpoint security

Tools

CrowdStrike Falcon

Elastic SIEM

Palo Alto

Microsoft Identity

AWS security telemetry

Job description

Apex is seeking a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will work with alerts, logs, vulnerabilities, and investigations to determine what happened and what to do next.

The role requires active TS/SCI clearance, US citizenship, and 2+ years in a SOC or related security operations role, with hands-on experience using EDR, SIEM, and cloud telemetry in a fast-paced aerospace