Tier II SOC Analyst with Security Clearance

TEKsystems c/o Allegis Group; Arlington (VA); On-site; USD 115,000 - 140,000; Full time

Job summary

An established industry player is seeking skilled professionals to join their Network Operations and Security Center (NOSC). This exciting role involves leading security missions, mentoring junior analysts, and analyzing escalated alerts using advanced monitoring tools. You'll collaborate with IT teams to implement effective strategies while ensuring comprehensive documentation. If you have a passion for cybersecurity and a strong background in incident response, this opportunity offers a chance to make a significant impact in a dynamic environment. Join a team dedicated to safeguarding critical networks and systems!

Benefits

Medical Insurance

Dental Coverage

Vision Insurance

401(k) Plan

Paid Time Off

Employee Assistance Program

Qualifications

• Active DoD Clearance (Secret, Top Secret, Top Secret/SCI) is required.
• Experience in security operations and incident response is essential.

Responsibilities

• Analyze escalated alerts from Tier 1 analysts and lead incident response activities.
• Prepare incident reports and collaborate with IT teams for mitigation strategies.

Skills

Incident Response

Security Information and Event Management (SIEM)

Endpoint Detection and Response (EDR)

Intrusion Detection/Prevention Systems (IDS/IPS)

Threat Hunting

Log Analysis

Tools

FTK

EnCase

Volatility

AWS

Azure

GCP

Job description

Compensation: $115,000–$140,000

They are hiring 3 people for shift work, one per shift, M–F, 1 person per shift.

The position entails working in a Network Operations and Security Center (NOSC), where the team monitors security and health alerts for systems across 14 different networks.

The ideal candidate will lead the security mission in the NOSC by providing training to junior analysts, reviewing reports, tuning detection tools, and preparing reports, presentations, and executive summaries.

Key Responsibilities

1. Analyze and investigate escalated alerts from Tier 1 analysts using SIEM, EDR, IDS/IPS, and network monitoring solutions.
2. Perform log analysis, PCAP review, and endpoint investigations to determine threats.
3. Lead incident response activities for escalated events, collaborating with Tier 3 analysts.
4. Prepare incident reports and briefings for internal stakeholders, including senior leadership.
5. Collaborate with IT teams to implement mitigation strategies.
6. Mentor and train Tier 1 NSOC analysts on incident handling and response.
7. Assist in tuning detection tools and developing use cases for anomaly detection.
8. Maintain comprehensive documentation aligned with protocols and best practices.

Additional Skills & Qualifications

Preferred Qualifications:

• Experience with forensic tools (e.g., FTK, EnCase, Volatility).
• Experience with cloud security monitoring in AWS, Azure, or GCP.
• Knowledge of Threat Hunting methodologies and tools.
• Participation in DOD CSSP inspections.

Eligibility: An active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to obtain an Interim clearance is required. U.S. Citizenship is mandatory.

Benefits: May include medical, dental, vision, critical illness, accident, hospital coverage, 401(k), life insurance, disability, HSA, transportation benefits, Employee Assistance Program, and paid time off. Benefits are subject to change based on eligibility, job classification, and employment length.