Threat Intel & SOC Analyst (Incident Response)

Amentum; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Job summary

Amentum seeks a SOC / Incident Response Analyst to support a U.S. Department of Energy contract in the Washington, DC area. The role focuses on delivering timely threat intelligence and rapid incident response across critical energy sector partners.

Qualified candidates have 3–4+ years in SOC/IR, experience with SIEM/EDR, threat hunting, malware analysis, and forensics, and knowledge of MITRE ATT&CK and NIST CSF. Active TS/SCI or DOE Q clearance is required.

Qualifications

• 3–4+ years supporting Security Operations Centers or Incident Response teams.
• Experience with SIEM platforms, EDR tools, threat hunting, malware analysis, and digital forensics.
• Knowledge of MITRE ATT&CK, NIST Cybersecurity Framework, and cyber kill chain methodologies.
• Security+, GCIH, GCFA, GCFE, or equivalent certifications preferred.

Responsibilities

• Provide a wide range of Cyber Intelligence (CI) services to deliver timely, actionable, and relevant threat intelligence on hostile nation‑states, cyber adversaries, and criminals seeking to conduct malicious cyber activities against U.S. energy sector partners.
• Support safety, quality, and procedural compliance within program operations.
• Assist in maintaining secure operations and incident response readiness across projects.

Skills

SOC operations

Incident response

Threat hunting

Malware analysis

Digital forensics

SIEM

EDR Tools

Tools

SIEM platforms

EDR tools

Threat intelligence tooling

Forensics tooling

Job description

Amentum seeks a SOC / Incident Response Analyst to support a U.S. Department of Energy contract in the Washington, DC area. The role focuses on delivering timely threat intelligence and rapid incident response across critical energy sector partners.

Qualified candidates have 3–4+ years in SOC/IR, experience with SIEM/EDR, threat hunting, malware analysis, and forensics, and knowledge of MITRE ATT&CK and NIST CSF. Active TS/SCI or DOE Q clearance is required.