Top Secret Cleared Tier 2 SOC Analyst

**MUST HAVE ACTIVE TOP SECRET CLEARANCE WITH SCI ELIGIBILITY

· This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret)

· Because an active or interim DoD clearance is required, U.S. Citizenship is required

Description

We are hiring 3 people for shift work, one per shift, M-F, 1 person 0600-1400, 1 person 1400-2200, and 1 person 2200-0600

The position entails working in a Network Operations and Security Center NOSC where the team is responsible for monitoring security and health alerts for systems on 14 different networks. The ideal candidate for this position will lead the security mission in the NOSC by providing training to junior analysts, reviewing reports written by the junior analysts, tuning tools for anomalous detection, writing reports, presentations, and executive summaries.

Key Responsibilities

• Analyze and investigate escalated alerts from Tier 1 analysts using tools such as SIEM, EDR, IDS/IPS, and network monitoring solutions.

• Perform advanced log analysis, PCAP review, and endpoint investigations to determine the nature and scope of threats.

• Lead incident response activities for escalated events, collaborating with Tier 3 analysts for complex or high-severity incidents.

• Prepare detailed incident reports and deliver briefings to internal stakeholders, including leadership.

• Collaborate with Tier 3 analysts, system administrators, and other IT teams to implement mitigation strategies.

• Mentor and provide technical guidance to Tier 1 NSOC analysts, including training on incident handling and response procedures.

• Assist in tuning detection tools and developing use cases for anomalous activity detection.

• Develop, update, and maintain comprehensive documentation ensuring accuracy and alignment with current protocols and best practices

Additional Skills & Qualifications

Preferred Qualifications

• Experience with forensic tools (e.g., FTK, EnCase, Volatility).

• Hands-on experience with cloud security monitoring in AWS, Azure, or GCP.

• Familiarity with Threat Hunting methodologies and tools.

• Experience participating in a DOD CSSP Inspection