Senior Security Operations Center Analyst

Job Summary:

The Tier 3 SOC Analyst acts as a senior escalation point within the Security Operations Center, providing expert technical analysis, threat detection, and incident response support. This role involves deep investigation of cybersecurity events, improving detection capabilities, and guiding operational security efforts to protect organizational assets. Responsibilities:

• Analyze and validate escalated cybersecurity events and incidents from lower-tier analysts.
• Perform advanced log analysis, correlation, threat hunting, and root-cause investigations.
• Support tuning of SIEM and other security tools to enhance detection accuracy and reduce false positives.
• Identify and ingest indicators of compromise (IOCs) and attack indicators into security platforms.
• Coordinate with technical teams to support incident containment, remediation, and resolution efforts.
• Develop and improve standard operating procedures (SOPs), runbooks, advisories, and response processes.
• Report trends, recurring issues, and recommend security improvements to leadership.

Required Skills & Certifications:

• 5+ years of hands-on experience as a cybersecurity analyst or engineer in a SOC or similar environment.
• Strong expertise in incident response, SIEM, IDS/IPS, firewalls, endpoint protection, and vulnerability management.
• Deep understanding of cyber threats, attack methods, countermeasures, and threat intelligence.
• Strong knowledge of TCP/IP protocols, networking, and forensic analysis techniques.
• Experience with scripting and automation tools such as PowerShell, Perl, and Regex.
• Bachelor's degree in Cybersecurity, IT, Engineering, or related field, or equivalent experience.

Preferred Skills & Certifications:

• Industry certifications such as GCIA, GCED, GPEN, GCIH, or similar.
• Undergraduate degree in Computer Science, Information Technology, or related field.
• Experience leading incident response planning and delivering complex security solutions.

Special Considerations:

• Role may require coordination with multiple technical teams for incident remediation.
• High attention to detail and ability to handle sensitive security information.

Scheduling:

• Interview conducted via webcam or in person.
• Position located in Washington, DC.