SOC Analyst

Job Number:

R0248418 SOC

AnalystThe Opportunity:

Are you an experienced cybersecurity analyst who enjoys digging deeper than the alert? Do threat hunting, complex investigations, and finding the activity others miss interest you? Join a team of advanced cybersecurity analysts working to protect the systems that support one of the world's most critical hubs for global trade and supply chain operations. As a Tier III Security Operations Center Analyst, you'll apply deep technical expertise within a 24O7 SOC to identify and respond to sophisticated cyber threats. You'll conduct intelligence-driven threat hunting, investigate complex and high-priority cybersecurity events, and perform advanced technical analysis, including malware triage, digital forensics, network analysis, and investigation of anomalous activity. You'll use Microsoft Sentinel, KQL, threat intelligence, and security telemetry across endpoint, network, cloud, and operational technology environments to understand adversary activity and identify threats that may bypass automated detections. You'll also help continuously improve the SOC's detection and response capabilities by developing and tuning detection use cases, correlation rules, alerts, and queries, identifying false positives and detection gaps, and improving playbooks and investigative processes. As a senior technical member of the SOC, you'll serve as an escalation point and mentor to Tier I and Tier II analysts, collaborate with technical SMEs and client stakeholders during investigations, and translate complex technical findings into clear risks, impacts, and recommended actions. You'll also support structured shift handoffs to maintain situational awareness and operational continuity across the 24O7 SOC. Join us. The world can't wait.

You Have:

3+ years of experience with cybersecurity, including SOC operations, incident response, threat hunting, or detection engineering Experience with Microsoft Sentinel and KQL Experience with SIEM detection engineering, tuning, and security investigations Knowledge of malware analysis, digital forensics, networking, and cloud security concepts Knowledge of scripting languages such as Python Knowledge of

MITRE ATT&CK, NIST SP

800-53, and

NIST SP 800-82

Secret clearance HS diploma or

GED Nice If You Have:

Experience supporting critical infrastructure, operational technology, or industrial control system environments Experience with Red Canary or similar MDR capabilities

Microsoft Certified:

Security Operations Analyst Associate, GCIH, GSOC, GICSP, GRID, GCIA, CCNA, CISSP, or similar

Certification Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our ...For full information see follow application link. Commitment to Non-Discrimination - All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.