TS/SCI SOC Analyst - Space Security & IR

Apex; Los Angeles (CA); Presencial; USD 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Shared upside

Best-in-class healthcare

Comprehensive PTO

Competitive 401(k)

8 weeks paid parental leave

Daily catered lunch

Vibrant community

Your dream desk setup

World-class Playa Vista office

Real impact opportunity

Descripción de la vacante

Apex is seeking a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will analyze alerts, logs, vulnerabilities, and investigations to determine what happened and what to do next.

Responsibilities include triaging alerts from CrowdStrike, Elastic SIEM, AWS, and Palo Alto; investigating anomalous logins and phishing; escalating incidents by severity and impact; and coordinating with IT,

Formación

• Active TS/SCI clearance or ability to obtain
• US Citizenship required
• 2+ years in SOC, IR, threat detection, endpoint security or related role
• Experience with EDR, SIEM, identity, cloud or network telemetry
• Working knowledge of Windows and Linux, authentication, networking fundamentals
• Ability to write search queries in SIEM and document investigations

Responsabilidades

• Monitor and triage security alerts from CrowdStrike, SIEMs, cloud services and networks
• Investigate suspicious logins, phishing, privilege changes, unusual network events
• Escalate incidents based on systems affected, severity, and impact
• Collaborate with IT, Cybersecurity, Network teams on findings
• Document incidents, resolutions, and affected assets
• Maintain logging reviews and incident response docs with IT and support teams

Conocimientos

Security operations

Threat detection

Incident response

Log analysis

Herramientas

CrowdStrike Falcon

Palo Alto

Tenable

Elastic Security

Microsoft GCC High

Entra ID

AWS security telemetry

Descripción del empleo

Apex is seeking a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will analyze alerts, logs, vulnerabilities, and investigations to determine what happened and what to do next.

Responsibilities include triaging alerts from CrowdStrike, Elastic SIEM, AWS, and Palo Alto; investigating anomalous logins and phishing; escalating incidents by severity and impact; and coordinating with IT,