Tier 2 SOC Analyst — Secret Clearance, 24/7 Cyber Defense

ShorePoint, LLC; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

Healthcare premiums covered 85%

401(k)

Continuing education

Certification maintenance & reimburs e

Job summary

ShorePoint, LLC in Washington, DC, seeks a Tier 2 Analyst (Secret Clearance) to support the enterprise Security Operations Center by reviewing escalations from Tier 1. Apply cybersecurity expertise to improve incident detection and analysis across both classified and unclassified environments.

You will correlate SIEM and EDR data with threat intel to identify scope and root cause, implement containment actions as directed, and maintain complete incident tickets through closure, with on-call

Qualifications

• Bachelor's degree or 3+ years of relevant experience in lieu of degree.
• 3+ years of relevant experience.
• Hands-on investigation experience with Splunk and FireEye HX, with solid SIEM/EDR knowledge.
• Ability to work rotating shifts and provide on-call support in a 24x7 SOC environment.
• Applicants must currently hold and maintain an active Secret clearance.

Responsibilities

• Investigate Tier 1 escalations using retrospective analysis to determine scope and impact of incidents.
• Correlate SIEM data, EDR telemetry, and threat intel to establish what happened and how.
• Recommend and execute containment actions, including host isolation and IOC blocking as directed.
• Prepare incident analysis reports and maintain incident tickets through closure.
• Identify false-positive patterns and suggest rule tuning to improve detection.

Skills

Incident response

Critical thinking

On-call support

Threat intelligence

Education

Bachelor's degree or 3+ years experience in lieu of degree

Tools

Splunk

FireEye HX

SIEM

EDR

Job description

ShorePoint, LLC in Washington, DC, seeks a Tier 2 Analyst (Secret Clearance) to support the enterprise Security Operations Center by reviewing escalations from Tier 1. Apply cybersecurity expertise to improve incident detection and analysis across both classified and unclassified environments.

You will correlate SIEM and EDR data with threat intel to identify scope and root cause, implement containment actions as directed, and maintain complete incident tickets through closure, with on-call