Security (SOC) Analyst, Secret Clearance Required

UltraViolet Cyber is seeking a Security (SOC) Analyst to monitor and analyze security events and alerts generated by the SIEM on a 24x7 basis. The Analyst will investigate suspicious or malicious activity that violates policy, document investigations, and maintain incident records while working within a shift schedule of 3x12 or 4x12‑hour shifts. Responsibilities Monitor and analyze security events and alerts from the SIEM on a 24x7 basis. Investigate suspicious or malicious activity that violates policy. Analyze logs and events from a variety of devices (firewalls, IDS/IPS, HIDS/HIPS, proxy/web filter, vulnerability scans, routers, VPN gateways, MDM, cloud security services, etc.). Record all investigation artifacts (emails, logs, documents, URLs, screenshots) into the SOC incident and tracking application. Document investigations and maintain detailed records for each security incident. Escalate and report outages of monitoring components as necessary. Provide actionable counter‑measures or mitigating controls for deployment in the enterprise network environment. Contribute to operational status monitoring and assist with shift rotation. Support documentation of security event logs and incident reports. Qualifications Active US Secret Security Clearance. 3+ years of experience in a Security Operations Center (SOC) or Network Operations Center (NOC) environment performing event monitoring and analysis. Working knowledge of Windows, OS X, Linux and other enterprise operating systems. Strong understanding of network communications, routing protocols (TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet protocols (SMTP, DNS, DHCP, SQL, etc.). Familiarity with adversarial tactics, techniques, and procedures (TTPs). Capability to analyze security logs and events from firewalls, IDS/IPS, HIDS/HIPS, proxy/web filter, vulnerability scans, routers, VPN gateways, laptop/MDM, DNS, DHCP, NAT, PKI, cloud platforms (AWS, Azure, Oracle, Salesforce, etc.). 8570 certification of Security+ or equivalent; other certifications such as GCIH, CEH, CYSA+ desired. Experience with Splunk query language, PCAP analysis, Tanium threat response, and SIEM platforms. Proficiency in creating and managing ticketing workflows for security investigations. Excellent verbal and written communication skills with the ability to produce clear, thorough incident reports and briefings. Experience monitoring the operational status of monitoring components and escalating outages. Understanding of Windows Active Directory is a plus. High school diploma required. Must be legally allowed to work in the US; position requires 5 days onsite per week in Herndon, VA. No third‑party candidates will be considered. Benefits 401(k) plan with 100% match of the first 3% contributed and 50% match of the next 2%. Medical, Dental, and Vision insurance (effective 1st day of the month following hire). Group Term Life, Short‑Term Disability, Long‑Term Disability. Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness coverage. Participation in the Discretionary Time Off (DTO) Program. 11 paid holidays annually. Equal Opportunity Statement UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status. #J-18808-Ljbffr