Tier 3 SOC Analyst

ShorePoint Inc; Washington (District of Columbia); On-site; USD 90,000 - 115,000; Full time

Job summary

ShorePoint Inc is seeking a Tier 3 SOC Analyst to lead incident response and threat hunting efforts. The ideal candidate will have robust experience in cybersecurity operations and a strong ability to mentor junior analysts. This position offers a unique opportunity to shape the cyber defense posture of critical infrastructure while enjoying comprehensive benefits and career development opportunities.

Benefits

18 days of PTO

401k

Paid maternity leave

Paid paternity leave

Disability insurance

Tuition assistance

Qualifications

• 5+ years experience in SOC or Cybersecurity Operations.
• CISSP certification required.
• Must be a U.S. citizen, eligible for security clearance.

Responsibilities

• Lead incident triage and response for cybersecurity threats.
• Perform forensic analysis on logs and systems.
• Mentor junior SOC analysts.

Skills

Incident response

Threat hunting

Cyber threat analysis

Data analysis

Forensic analysis

Scripting

Education

Bachelor’s degree in Cybersecurity

Bachelor’s degree in Computer Science

Tools

SIEM platforms

EDR tools

Job description

Join to apply for the Tier 3 SOC Analyst role at ShorePoint Inc

Join to apply for the Tier 3 SOC Analyst role at ShorePoint Inc

Direct message the job poster from ShorePoint Inc

Who we are:

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement, etc.

Who we’re looking for:

We are seeking a Tier 3 SOC Analyst for a potential opportunity, with expert-level knowledge in incident response, threat hunting and advanced cyber threat analysis. The ideal candidate will lead complex investigations, mentor junior analysts and drive improvements in detection capabilities across federal systems. The Tier 3 SOC Analyst role is responsible for triaging and responding to sophisticated threats, refining SOC processes and enhancing operational readiness through intelligence-driven defense. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. Employment for this position is dependent on the successful award of the contract.

What you’ll be doing:

• Lead advanced incident triage, analysis, containment and response for complex cybersecurity threats and confirmed breaches.
• Correlate data across multiple log sources, network traffic, endpoint activity and threat intelligence to identify sophisticated attacks.
• Perform in-depth forensic analysis on endpoints, logs and systems to determine root cause and impact of incidents.
• Proactively conduct threat hunting operations using behavioral analytics and threat intelligence to identify undetected threats.
• Develop, refine and tune SIEM correlation rules, detection logic and automation workflows.
• Create and maintain incident response playbooks, escalation procedures and SOC runbooks.
• Provide mentoring, training and technical guidance to Tier 1 and Tier 2 SOC analysts.
• Collaborate with security engineering, compliance and IT operations teams to enhance the security posture.
• Interface with federal security stakeholders during incident investigations, briefings and reporting.
• Analyze and apply threat intelligence (IOCs, TTPs, threat actor profiles) aligned with MITRE ATT&CK, STIX/TAXII or similar models.
• Contribute to lessons learned, post-incident reviews and strategic improvements to detection and response capabilities.

What you need to know:

• Strong experience with SIEM platforms (e.g., Splunk, QRadar, ELK) and EDR tools (e.g., CrowdStrike, SentinelOne, Microsoft Defender).
• Deep understanding of the cyberattack lifecycle, adversary behavior and detection strategies.
• Proven experience in analyzing network traffic, system logs and endpoint telemetry.
• Strong knowledge of Windows and Linux operating systems, including log analysis and command-line investigation.
• Familiarity with federal cybersecurity frameworks: NIST 800-53, FISMA, FedRAMP and RMF.
• Experience documenting and communicating complex technical findings to both technical and executive stakeholders.
• Proficiency in scripting languages (e.g., Python, PowerShell, Bash) for automation and data analysis.

Must have’s:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field.
• 5+ years of experience in a SOC, Incident Response or Cybersecurity Operations role.
• CISSP certification or equivalent required.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Hands-on experience with forensic tools (e.g., FTK, EnCase, Volatility, Autopsy).
• Knowledge of cloud security monitoring (Azure, AWS or Google Cloud).
• Experience integrating and correlating threat intelligence platforms (TIPs) and feeds.
• Red team / blue team experience or knowledge of adversarial simulation tools (e.g., Cobalt Strike, Atomic Red Team).

Where it’s done:

• Onsite (Washington, D.C. or Fort Worth, TX).
• This position may require participation in a rotating shift schedule or on-call support.

Seniority level

• Seniority level

  Associate

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at ShorePoint Inc by 2x

Inferred from the description for this job

Medical insurance

Vision insurance

401(k)

Paid maternity leave

Paid paternity leave

Disability insurance

Tuition assistance

Get notified about new Security Operations Center Analyst jobs in Washington, DC.

Security Operations Center (SOC) Analyst

Security Operations Center (SOC) Analyst - Mid

Senior Security Operations Center (SOC) Analyst

Security Operations With Incident Response (IR) - (Hybrid)

Senior Security Operations Center (SOC) Analyst - TS

Information Security Analyst (SOC 2 Compliance)

Fairfax, VA $92,400.00-$115,000.00 1 month ago

FBI Special Agent: Cybersecurity/IT Expertise

Arlington, VA $99,461.00-$128,329.00 1 week ago

Washington, DC $92,000.00-$130,000.00 1 week ago

Washington DC-Baltimore Area $69.00-$73.00 6 days ago

Security Operations Center Analyst (SOC)

Washington, DC $90,000.00-$110,000.00 2 weeks ago

Junior Security Operation Center Analyst

Information Security Analyst – Strategic Services

Fairfax, VA $105,000.00-$115,000.00 1 month ago

Threat Hunter - Security Operations Expert

McLean, VA $170,000.00-$200,000.00 14 hours ago

Washington, DC $78,605.00-$106,349.00 2 days ago

Security Analyst – Global Security Operations Center (SOC)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.