SOC Analyst

Position is contingent upon contract award and funding.

Entarian is seeking an experienced Security Operations Center (SOC) Analyst to support cybersecurity monitoring threat detection incident response and continuous monitoring activities for mission-critical information systems. The SOC Analyst is responsible for monitoring security events analyzing alerts tuning Security Information and Event Management (SIEM) platforms and supporting Continuous Monitoring (ConMon) operations to maintain the security posture of enterprise and mission systems. This role works closely with ISSOs ISSMs ISSEs system administrators and network engineers to identify investigate and respond to cybersecurity events.

The ideal candidate will have demonstrated experience supporting Department of Defense or federal cybersecurity operations involving space systems mission operations communications networks cloud environments or enterprise IT capabilities.

Key Responsibilities include but are not limited to:

• Monitor enterprise security events and analyze alerts using SIEM and cybersecurity monitoring tools.
• Investigate triage and respond to cybersecurity incidents in accordance with established procedures.
• Configure and tune SIEM rules alerts dashboards and correlation logic to improve threat detection and reduce false positives.
• Support Continuous Monitoring (ConMon) activities including security event analysis compliance monitoring and reporting.
• Perform log analysis threat hunting and forensic data collection to identify potential security threats and vulnerabilities.
• Coordinate incident response activities with cybersecurity engineering and operations teams.
• Support vulnerability management by reviewing scan results and tracking remediation activities.
• Document security incidents findings and response actions in accordance with program and customer requirements.
• Develop and maintain SOC procedures playbooks and operational documentation.
• Prepare security reports metrics and briefings for program leadership and government stakeholders.

Salary range: $105000.00 - $120000.00

• Active Top Secret security clearance with SCI eligibility.
• Bachelors degree in Cybersecurity Information Technology Computer Science or related technical discipline. Equivalent experience may be considered.
• Minimum three (3) years of experience supporting Security Operations Center (SOC) or cybersecurity operations.
• Experience with SIEM platforms such as Splunk Microsoft Sentinel Elastic QRadar or similar technologies.
• Experience analyzing security events investigating incidents and performing log analysis.
• Experience supporting Continuous Monitoring (ConMon) and vulnerability management activities.
• Familiarity with NIST RMF incident response processes and cybersecurity best practices.
• DoD 8140 (or legacy DoD 8570) compliant certification such as Security CySA GSEC SSCP or equivalent.
• Strong analytical troubleshooting and communication skills.
• Proficiency with Microsoft Office Suite including Word Power-Point Excel and Outlook.
• Ability to travel approximately 25% to support customer locations and operational activities.

• Experience supporting DoD Intelligence Community U.S. Space Force or other federal cybersecurity operations.
• Experience supporting AWS GovCloud Azure Government or hybrid cloud security monitoring.
• Experience with SOAR platforms endpoint detection and response (EDR) and threat intelligence tools.
• Experience performing threat hunting malware analysis or digital forensics.
• Familiarity with MITRE ATT&CK Zero Trust Architecture and DISA cybersecurity guidance.
• Experience supporting classified environments and mission-critical operations.
• Certifications such as CySA GCIA GCIH CISSP or equivalent.
• Experience supporting mission operations SATCOM or enterprise network environments.