Senior SOC Security Analyst

Requirements:

• At least 2 years of experience in security monitoring and incident response.
• At least 2 years of experience with the MITRE ATT&CK framework.
• At least 2 years of experience creating dashboards and reports.
• An associate degree in information technology, information security, or a related field; we may accept four years of relevant work experience in place of the degree.
• Two years of experience supporting large-scale SOC operations.
• Preferred: Experience with Palo Alto Cortex XSIAM/XDR.
• Preferred: Knowledge of Linux, network administration, and network design.
• Preferred: Experience administering firewalls, VPN technology, Active Directory, and intrusion detection/prevention systems.
• Preferred: Local presence near our organization or surrounding area.
• Preferred: CISSP, CISA, CISO, or an equivalent advanced security certification.
• Preferred: Additional relevant certifications, such as CEH, OSCP, or GPEN, or vendor certifications in information security.

Responsibilities:

• Review and correlate security events from SIEM, EDR, IDS/IPS, and threat intelligence sources to identify attack patterns, emerging threats, and incidents.
• Analyze suspicious activity, validate incidents, establish root cause and impact, and escalate critical incidents to Tier 3 with detailed context when needed.
• Prepare incident reports, timelines, and post-incident summaries, and contribute lessons learned and remediation and prevention recommendations.
• Investigate reported phishing, malware infections, and potential policy violations, and advise users and internal and external teams on containment and recovery.
• Recommend improvements to SOC playbooks and workflows, and tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage.
• Work with engineering teams to configure and tune monitoring tools.
• Integrate threat intelligence feeds into workflows and proactively hunt for threats using current tactics, techniques, and procedures (TTPs).
• Serve as a customer-facing subject matter expert, demonstrate capabilities, and resolve issues.
• Document SOC processes, runbooks, and troubleshooting procedures.
• Coordinate with engineering, SOC, and organizational staff to meet goals.
• Perform other duties as needed.

Technologies:

• Active Directory
• Support
• Linux
• Network
• Security
• VPN
• Fine-tuning

More

We are recruiting for a security incident response, threat detection, and continuous monitoring role across enterprise security tools. On-site work may be required as needed. The pay range is $58.70–$63.70 per hour. We offer medical, dental, and vision insurance; a 401(k); a health savings account; short- and long-term disability insurance; life and AD&D insurance; paid sick leave where required by law; supplemental insurance; identity theft protection; pet insurance; wellness programs; an employee assistance program; and career development opportunities. Benefit eligibility and terms may vary by employment status, length of service, and work location, and paid sick leave follows applicable state and local requirements. Cynet Systems Inc., founded in 2010 and headquartered in the Washington, DC metro area, provides technology staffing and workforce solutions to Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We support staffing across IT, engineering, life sciences, clinical, and professional fields, and are a nationally and locally certified Minority Business Enterprise. Our certifications include ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II.

last updated 43 week of 2026