Security Operations Center Analyst

Our client, a major defense contractor supporting a large-scale enterprise digital modernization initiative, is seeking SOC Analyst Tier III consultants to support the continued expansion and maturation of a corporate Security Operations Center (SOC). This program is part of a broader enterprise transformation effort focused on Zero Trust security architecture, cyber modernization, secure collaboration, and enterprise cybersecurity operations across a 40,000-user environment. The Tier III team serves as the senior investigative and escalation layer within the SOC, responsible for complex incident response, advanced threat analysis, threat hunting, root cause determination, and remediation strategy. These consultants will work closely with SOC leadership, incident response teams, infrastructure engineering, and cybersecurity stakeholders to identify emerging threats, improve detection capabilities, and strengthen overall security operations. The ideal candidate combines strong technical investigation skills with the ability to mentor junior analysts, guide incident response activities, and operate effectively within highly regulated and security-focused environments. Musts: 5+ years of SOC, Cyber Defense, Incident Response, or Security Operations experience Experience serving as a Tier III SOC Analyst, Incident Response Lead, Cyber Operations Lead, or senior escalation resource Security+, CySA+, GCIH, GCIA, GCFA, CEH, or similar cybersecurity certifications Advanced incident response experience including containment, eradication, recovery, and post-incident analysis Experience conducting threat hunting and root cause investigations across endpoint, network, cloud, and identity platforms Hands-on experience with SIEM technologies such as Splunk, Chronicle, Exabeam, Sentinel, or similar platforms Experience utilizing SOAR technologies such as XSOAR or similar automation and orchestration tools Pluses: Experience supporting DoD, federal, defense industrial base, or highly regulated environments Familiarity with Zero Trust architectures and cybersecurity modernization initiatives Experience supporting CMMC, NIST 800-171, RMF, or related compliance frameworks Active Secret Clearance or recent clearance eligibility Experience with threat intelligence integration, detection engineering, or advanced security analytics Experience supporting large enterprise SOC operations with 24x7 monitoring environments #J-18808-Ljbffr Oxford Global Resources