Security Operations Analyst III (Senior SOC Analyst)

Job Title: Security Operations Analyst III (Senior SOC Analyst)
Location: Washington, DC (Hybrid)
Duration: 12 Months

Job Summary

We are seeking a highly experienced Senior Security Operations Analyst (SOC Analyst III) to support enterprise-level security operations. The ideal candidate will possess deep expertise in SIEM log analysis, EDR/NDR monitoring, and incident response, along with hands-on experience in federal, FISMA-compliant environments. This role demands strong analytical capabilities, proactive threat hunting skills, and proficiency with modern security platforms, including the Microsoft 365 Defender suite.

Key Responsibilities

• Monitor, analyze, and respond to security events and incidents across enterprise environments
• Perform advanced threat hunting and root cause analysis
• Utilize SIEM tools to detect, investigate, and remediate security threats
• Analyze alerts from EDR/NDR platforms and escalate incidents as needed
• Lead incident response activities, including containment, eradication, and recovery
• Ensure compliance with federal security standards including FISMA and NIST frameworks
• Document incidents, create reports, and provide recommendations for security improvements
• Collaborate with cross-functional teams to enhance security posture and response capabilities

Required Qualifications

• 6+ years of experience in Security Operations / SOC Analysis at a senior level
• Strong hands-on experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel)
• Experience with EDR/NDR solutions (e.g., CrowdStrike, Carbon Black, Defender for Endpoint)
• Proficiency with Microsoft 365 Defender suite
• In-depth understanding of incident response lifecycle and threat analysis
• Experience working in federal environments with FISMA compliance requirements
• Strong knowledge of NIST SP 800-53 security controls
• Excellent analytical, documentation, and communication skills

Preferred Qualifications

• Relevant certifications such as:
  • CompTIA Security+
  • CompTIA CySA+
  • GIAC Certified Incident Handler (GCIH)
• Experience with threat intelligence platforms and security automation tools