Tier II Security Operations Center (SOC) Analyst

General Dynamics Information Technology; Bossier City (LA); On-site; USD 70,000 - 110,000; Full time

Job summary

General Dynamics Information Technology is seeking a Tier II Security Operations Center Analyst to perform deep-dive investigation, advanced incident response, and proactive threat hunting for client environments. You will work in an evolved SOC leveraging AI, ML, and SOAR to accelerate detection and response times.

The role requires strong analytical skills, hands-on experience with SIEM/EDR/XDR tools, and familiarity with NIST/FISMA and DoD policies.

Qualifications

• 3+ years of SOC or incident response experience

Responsibilities

• Advanced Incident Response: conduct deep-dive analysis, containment and remediation of escalated events
• AI & Automation Integration: tune AI-driven tools and SOAR playbooks to streamline triaging
• Proactive Threat Hunting: design hypotheses across network, host and cloud environments
• Analytical Log Correlation: analyze SIEM/EDR/XDR and cloud data to reconstruct attack chains
• Threat Intelligence Utilization: operationalize tactical intelligence to block emerging threats
• Continuous Improvement: refine detection rules and automate repetitive tasks with Tier III
• Mentorship: guide Tier I analysts and review escalated tickets

Skills

Threat hunting

Incident response

Security analytics

SIEM

Cloud security

NIST/FISMA/DoD

US citizenship

Education

Cybersecurity/CS degree or certification

CompTIA Security+ certification

Tools

Splunk

Microsoft Defender EDR/XDR

Microsoft Intune

Entra ID

Palo Alto Networks

Job description

Technology Shared Services (TSS) is looking for a Tier II Security Operations Center (SOC) Analyst. As a core member of our 24x7x365 TSS Evolved SOC team, the Cyber Security Analyst (Tier II) will be responsible for deep-dive investigation, advanced incident response, and proactive threat hunting.

Operating within an Evolved SOC paradigm, you will leverage automation, machine learning, and artificial intelligence (AI) to accelerate detection and response times. The ideal candidate possesses strong analytical skills and the ability to pivot seamlessly between traditional analysis and AI-driven security orchestration tools to defend our client environments.

RESPONSIBILITIES

As a Tier II Security Operations Center Analyst, you will:

• Advanced Incident Response: Conduct deep-dive analysis, containment, and remediation of escalated security events and complex cyberattacks.
• AI & Automation Integration: Utilize and tune AI-driven security tools, Machine Learning (ML) models, and SOAR (Security Orchestration, Automation, and Response) playbooks to streamline alert triaging and reduce false positives.
• Proactive Threat Hunting: Design and execute threat-hunting hypotheses across network, host, and cloud environments to uncover sophisticated threats that bypass traditional defenses.
• Analytical Log Correlation: Analyze and correlate complex datasets from SIEM, EDR, XDR, and cloud environments to reconstruct attack chains and identify root causes.
• Threat Intelligence Utilization: Operationalize tactical threat intelligence to proactively block emerging threats and update detection signatures.
• Continuous Improvement: Collaborate with Tier III analysts and engineers to refine detection rules, automate repetitive tasks, and improve overall SOC efficiency.
• Mentorship: Assist in the professional development of Tier I analysts by providing technical guidance and reviewing escalated tickets.

REQUIRED QUALIFICATIONS

You MUST have:

• Technical Training, Certification(s) or Degree in Cybersecurity, Computer Science, or equivalent technical work experience
• 3 or more years of demonstrated experience in a SOC or dedicated incident response role
• CompTIA Security+ certification (or equivalent DoD-approved baseline certification) required for Tier 2 SOC Analyst duties
• Proven ability to analyze complex data sets, recognize anomalous patterns, and deduce attacker intentD
• Demonstrated experience utilizing AI-powered cybersecurity platforms (e.g., Copilot for Security, AI-driven EDR/XDR) or leveraging LLMs for log analysis and script generation.
• Demonstrated experience utilizing of the MITRE ATT&CK framework, the OSI model, TCP/IP protocols, and cloud security architectures (AWS, Azure, or GCP).
• Advanced hands‑on experience with SIEM and security technologies, including Splunk, Microsoft Defender EDR/XDR, Microsoft Intune and Entra ID, Palo Alto Networks, and enterprise log aggregation and analysis platforms.
• Working knowledge of NIST, FISMA, FedRAMP, and DoD cybersecurity policies and frameworks, with the ability to apply applicable security controls, procedures, and requirements to day‑to‑day SOC operations.
• Must be able to pass a full background check 6C to obtain the required determination for a position of Public Trust.
• Must be a US Citizen

Work Environment:

• Louisina residency; living within a reasonable commutable distance (~approximately 60 miles or less) of the Bossier City, LA facility

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Flexibility: Full-flex work week to own your priorities at work and at home
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY

Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.