Strategic SOC Analyst: Threat Hunting & Incident Response

Everwatch; Corridor North (MD); On-site; USD 79,000 - 93,000; Full time

Job summary

EverWatch seeks a Security Operations Center Analyst to join its defense-focused team in the Maryland corridor. You will analyze logs, threat intel, and forensic data to identify advanced threats and coordinate incident response for critical government missions.

Applicants should have SIEM experience (Splunk), networking basics, and proficiency with Linux CLI, Nessus, and firewall configurations. TS/SCI with polygraph is required or eligible.

Qualifications

• Experience with SIEM fundamentals and Splunk.
• Networking fundamentals and log analysis skills.
• Experience reviewing Nessus scans and firewall configurations.
• Proficient with Linux hosts and CLI navigation.
• TI/IR experience and TS/SCI with polygraph is required or strong eligibility.

Responsibilities

• Analyze logs, forensic data, and threat intel to identify advanced threats.
• Perform advanced threat identification and complex incident response.
• Advise on gaps and hardening to protect networks.
• Collaborate with customer networks to stop adversaries.

Skills

SIEM fundamentals

Networking fundamentals

Linux CLI

Log analysis

Incident response

Threat intelligence

Education

HS diploma or GED + 6+ yrs IR

Bachelor's degree + 2+ yrs IR

Tools

Splunk

Bro/Zeek

Suricata

Snort

Nessus

Firewall configurations

Job description

EverWatch seeks a Security Operations Center Analyst to join its defense-focused team in the Maryland corridor. You will analyze logs, threat intel, and forensic data to identify advanced threats and coordinate incident response for critical government missions.

Applicants should have SIEM experience (Splunk), networking basics, and proficiency with Linux CLI, Nessus, and firewall configurations. TS/SCI with polygraph is required or eligible.