Senior SOC Business Analyst

Evans & Chambers Technology is seeking a Senior SOC Business Analyst to lead requirements elicitation for a Security Operations Center. The role translates mission needs, threat realities, and compliance mandates into validated, traceable requirements and aligns program outcomes with technical design.

Responsibilities:

• Bridges between the SOC Program Lead, who owns mission outcomes, and the SOC Technical Architect, who owns the technical design, making sure that what the program commits to and what the architecture delivers trace to the same validated requirements
• Presents prioritized requirements and trade-offs so the Program Lead can make scope, cost, and schedule decisions
• Escalates unresolved stakeholder conflicts, requirement risks, and dependencies with recommended courses of action
• Prepares requirements content for leadership briefings, governance boards, and acquisition documents
• Collaborates with the SOC Technical Architect early so requirements reflect technical realities, such as classification boundaries, cross-domain needs, and existing enterprise systems
• Validates that each requirement is feasible, unambiguous, and testable before it is baselined
• Assesses the impact of proposed design and requirement changes
• Holds a regular joint working session to review requirements status, open issues, and design decisions
• Identifies and maps stakeholders across mission owners, SOC operators, intelligence partners, IT operations, legal, privacy, and acquisition
• Plans and facilitates interviews, workshops, and site visits to capture current-state pain points and future-state needs
• Elicits requirements for core SOC functions: 24x7 monitoring, threat detection, incident response, threat intelligence, threat hunting, and vulnerability management
• Documents current-state (as-is) and target-state (to-be) SOC processes, workflows, and escalation paths, and run gap analysis between them
• Writes business, functional, non-functional, security, and interface requirements in clear, testable language
• Develops concept of operations (CONOPS) inputs, use cases, user stories, operational scenarios, and SOC playbook requirements
• Defines requirements for tooling categories such as SIEM, SOAR, EDR/XDR, NDR, log management, case management, and threat intelligence platforms, without bias toward any vendor
• Builds and maintains a requirements traceability matrix (RTM) linking each requirement to its source, design element, and verification method

Requirements:

• Active TS/SCI
• Bachelor's degree in information systems, cybersecurity, computer science, business, or a related field
• 12+ years of business or systems analysis experience, with 5+ years in federal, DoD, or Intelligence Community environments
• CySA+, GCIA, GCIH, or CISSP required