Hiring: cybersecurity/SOC analyst| Washington, DC (Locals only)
Location: OCTO – 200 I Street SE, Washington, DC 20003
Role: SOC Analyst – Tier 3
Work Arrangement: On-site / In Person Interview
We are looking for an experienced SOC Analyst – Tier 3 to join a cybersecurity team supporting the Government of the District of Columbia (OCTO).
Provide advanced technical oversight and analysis of escalated SOC events and incidents.
Perform advanced SIEM, log, network, and security-event analysis.
Conduct proactive threat hunting to identify previously undetected threats.
Investigate and respond to malware, phishing, ransomware, DDoS, C2, scanning, and other adversarial activity.
Identify, validate, and ingest IOCs/IOAs into security tools.
Support SIEM/security-tool tuning and reduce false positives.
Develop and maintain SOC SOPs, playbooks, and incident-response runbooks.
Perform trend analysis and recommend security and process improvements.
Provide technical guidance to SOC analysts and enterprise technology teams.
5+ years of hands-on cybersecurity/SOC analyst or engineering experience.
5+ years of SIEM-based security event and incident analysis.
Strong knowledge of TCP/IP, networking, threat detection, incident response, and attack methodologies.
Extensive experience with technologies such as SIEM, IDS/IPS, firewalls, antivirEDR, network traffic analysis, and malware analysis.
11+ years preferred in implementing/administering security technologies.
11+ years of scripting and automation experience with technologies such as PowerShell, Perl, and Regex.
Strong experience developing and executing information security incident response plans.
Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or equivalent experience.
SANS certifications such as GCIH, GCIA, GCED, GPEN, or comparable industry certifications are highly desirable.
