cybersecurity/SOC analyst

Hiring: cybersecurity/SOC analyst| Washington, DC (Locals only)

Location: OCTO – 200 I Street SE, Washington, DC 20003
Role: SOC Analyst – Tier 3
Work Arrangement: On-site / In Person Interview

We are looking for an experienced SOC Analyst – Tier 3 to join a cybersecurity team supporting the Government of the District of Columbia (OCTO).

Key Responsibilities

• Provide advanced technical oversight and analysis of escalated SOC events and incidents.

• Perform advanced SIEM, log, network, and security-event analysis.

• Conduct proactive threat hunting to identify previously undetected threats.

• Investigate and respond to malware, phishing, ransomware, DDoS, C2, scanning, and other adversarial activity.

• Identify, validate, and ingest IOCs/IOAs into security tools.

• Support SIEM/security-tool tuning and reduce false positives.

• Develop and maintain SOC SOPs, playbooks, and incident-response runbooks.

• Perform trend analysis and recommend security and process improvements.

• Provide technical guidance to SOC analysts and enterprise technology teams.

Required Experience

• 5+ years of hands-on cybersecurity/SOC analyst or engineering experience.

• 5+ years of SIEM-based security event and incident analysis.

• Strong knowledge of TCP/IP, networking, threat detection, incident response, and attack methodologies.

• Extensive experience with technologies such as SIEM, IDS/IPS, firewalls, antivirEDR, network traffic analysis, and malware analysis.

• 11+ years preferred in implementing/administering security technologies.

• 11+ years of scripting and automation experience with technologies such as PowerShell, Perl, and Regex.

• Strong experience developing and executing information security incident response plans.

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or equivalent experience.

Preferred Certifications

SANS certifications such as GCIH, GCIA, GCED, GPEN, or comparable industry certifications are highly desirable.