# Security Operations Center (SOC) Analyst

**Company**: Leidos
**Job type**: full-time
**Salary**: $69,550.00 - $125,725.00
**Category**: Security
**Industry**: Defence & Intelligence

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Shiloh-IL/Security-Operations-Center--SOC--Analyst_R-00192624-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_838da9a4-d8e

## Description

We are seeking proactive defenders for a critical role safeguarding the nation's most sensitive digital landscapes as a Security Operations Center (SOC) Analyst on our 24x7 front-line security operations team.

You will be directly responsible for defending mission environments against the world's sophisticated and persistent cyber threats.

**Primary Responsibilities:**

- Conduct investigation and triage of security alerts from endpoints, IDS/IPS, NetFlow, and custom sensors to identify and neutralize threats within our mission spaces.

- Perform deep-dive analysis of extensive, highly-classified log files, pivoting between disparate datasets and correlating evidence to support complex incident investigations against nation-state actors.

- Produce detailed technical findings and reports for high-level stakeholders, documenting adversary tactics, techniques, and procedures (TTPs).

- Integrate and operationalize highly-classified threat intelligence feeds and Indicators of Compromise (IOCs) into security sensors and SIEM platforms.

- Collaborate closely with specialized incident response teams and ensure timely, precise communication of security incidents to mission partners.

**Key Skillsets We Are Looking For:**

- SOC Experience: You understand the operational flow, high tempo demands, and rigorous standards of a 24x7 Security Operations Center, particularly those operating at the highest classification levels.

- Critical Thinking & Adversary Mindset: You possess the ability to look beyond the surface of an alert to uncover the TTPs of advanced persistent threats (APTs).

- Demonstrated Self-Motivation: You are a self-starter who takes active ownership of your professional development.

- Thrives on Change: The threat landscape and tactical priorities shift constantly.

**Shift & Operational Requirements:**

- Predictable Work-Life Balance: To support your well-being, we utilize a predictable five-day, 8-hour shift structure.

- Shift Options to Fit Your Lifestyle: Our 24x7 mission requires continuous coverage, but it also provides the opportunity to align your work hours with your personal routine.

**Required Qualifications:**

- Clearance: Must have an active DoD Top Secret security clearance.

- Level I: Bachelor's degree and 2+ years of relevant experience.

- Level II: Bachelor's degree and 4+ years of relevant experience.

- Baseline Certification: Current DoD 8570 IAT Level II (or higher) certification.

- Specialized Certification: Ability to obtain a DoD 8570 CSSP-Analyst level certification within 180 days of hire.

- Technical Core: Solid foundation in networking principles, including packet analysis, common ports/protocols, traffic flow, the OSI model, and defense-in-depth architecture.

**Preferred Qualifications:**

- Prior experience working within a TS/SCI operational environment, DISA, or other specialized DoD agencies.

- Experience applying intelligence-driven defense strategies utilizing the MITRE ATT&CK or Cyber Kill Chain frameworks against known APT intrusion sets.

- In-depth experience utilizing SIEM/SOAR platforms to perform behavioral and statistical analysis across multiple log types within a classified network.

- Knowledge or experience in defending classified cloud environments.

- Basic scripting and programming skills to automate routine analytical tasks.

The pay range for this job is $69,550.00 - $125,725.00.

## Skills

### Required
- DoD Top Secret security clearance
- CompTIA Security+
- SIEM/SOAR platforms
- networking principles
- packet analysis
- Python
- PowerShell

### Nice to have
- TS/SCI operational environment
- MITRE ATT&CK
- Cyber Kill Chain
- classified cloud environments
- scripting and programming skills

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Shiloh-IL/Security-Operations-Center--SOC--Analyst_R-00192624-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)