SOC Analyst Tier 3

Responsibilities

• Monitor, analyze, and triage security events and alerts generated by SIEM platforms in a 24/7 SOC environment.
• Conduct advanced incident response activities, including investigation, containment, eradication, and recovery.
• Analyze logs and data from firewalls, IDS/IPS, endpoints, and network devices.
• Leverage tools such as Splunk, Tanium, Trellix, Zscaler, MS Defender, and FireEye for threat detection and response.
• Escalate and coordinate incidents, providing detailed documentation and reporting.
• Maintain awareness of emerging threats, vulnerabilities, and attack vectors.

Requirements

• Minimum of 4 years of experience in a SOC or NOC environment performing security monitoring and analysis.
• Strong experience with SIEM platforms, specifically Splunk.
• Hands-on experience with EDR tools supporting incident investigations.
• Familiarity with incident response lifecycle.
• Working knowledge of operating systems including Windows, Linux, and macOS.
• Strong understanding of network protocols (TCP, UDP, ICMP, BGP, MPLS).
• Experience analyzing logs from firewalls, IDS/IPS, and other security infrastructure.

Qualifications

• Experience in a federal or government SOC environment.
• Exposure to enterprise security tooling including Tanium, Trellix, Zscaler, Microsoft Defender, and FireEye.
• Strong analytical and problem-solving skills.
• Prior experience operating in shift-based environments.

Benefits & Perks

• Medical, Dental, and Vision coverage.
• 401(k) with company match (eligible after 6 months; vesting applies).
• Company-paid Life and AD&D insurance, voluntary options available.
• Short-term and long-term disability options.
• Employee Assistance Program (EAP) with mental health resources.
• Telehealth and virtual care options.
• Paid Time Off (PTO) and federal holidays.
• Wellness programs, discounts, and lifestyle benefits.