Cyber Defense Incident Responder

Job Number : R0241994 Cyber Defense Incident Responder The Opportunity: As a security operations center analyst, you’re in the middle of the action, responding to and mitigating threats in real time. You are the first line of cyber defense for the organization, guiding best practices and security measures. We need a Tier 2 SOC analyst to help secure critical infrastructure from the constant onslaught of cyber‑attacks for the Army. As a SOC analyst on our team, you’ll improve monitoring strategies and analyse threats using state‑of‑the‑art tools. You’ll use your cyber security skills to: Respond to and resolve cybersecurity incidents and proactively prevent reoccurrence. Monitor the operation of systems and networks to ensure business continuity. Review alerts to determine relevancy and urgency. Perform scans to identify security vulnerabilities and potential risks, and take effective measures to prevent and reduce incidents. Leverage emerging threat intelligence to identify affected systems and scope of the attack. Analyze and identify potential risks, vulnerabilities, and malware. Manage and configure security monitoring tools and direct remediation and recovery efforts. You’ll work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting impact. You’ll guide efforts to ascertain how many systems are affected and assist recovery. Combining threat intelligence, event data, and recent assessments, you’ll identify patterns to understand attackers’ goals and stop them from succeeding. Join us. The world can’t wait. You Have: 4+ years of experience supporting federal agencies, including in cybersecurity or SOC environments. 1+ years of experience preparing and delivering weekly, monthly, or quarterly program reports and executive briefings. Ability to coordinate across multiple stakeholders, including government leads, vendors, and technical teams. Top Secret clearance. Bachelor’s degree. Nice If You Have: Experience in program or project management supporting IT or cybersecurity programs with multiple task orders or complex workstreams. Experience supporting federal agencies in cybersecurity or SOC environments. Experience contributing to CIO‑level briefings or executive dashboards. Experience tracking operational metrics, incident statistics, and performance trends. Experience with project management and reporting tools such as MS Project, Excel, PowerPoint, or Confluence. Knowledge of SOC operations, including incident response, threat monitoring, and security analytics. Knowledge of risk management practices, including maintaining risk registers and mitigation strategies. Ability to work in a fast‑paced, deadline‑driven environment with minimal oversight. Excellent written and verbal communication skills, including for writing reports and facilitating meetings. Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required. Compensation At Booz Allen, the projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). This posting will close within 90 days from the posting date. Work Model Remote : If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid : If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. Onsite : If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Phase2 Technology