Job Description

Salary: $75,000 - 75,000 per year Requirements:

• At least 11 years of experience is required; the posting also lists minimum qualifications of five years in several cybersecurity areas.
• Five years of experience as a cybersecurity analyst or engineer in a security operations center, or equivalent knowledge.
• Five years of experience with countermeasures for cyberattacks such as malicious code, DDoS, and phishing.
• Five years of experience analyzing and responding to security events and incidents using a Security Information and Event Management (SIEM) system.
• Five years of experience with cyberattack methodologies, including tactics, techniques, and related countermeasures.
• Five years of experience with TCP/IP protocols, services, and networking, and with identifying, analyzing, containing, and eradicating cybersecurity threats.
• 11–15 years of experience implementing, administering, and operating information security technologies such as firewalls, IDS/IPS, SIEM, antivirus, network traffic analyzers, and malware analysis tools.
• 11–15 years of experience using advanced scripting and automation tools, such as Perl, PowerShell, and regular expressions.
• 11–15 years of experience developing, leading, and executing information security incident response plans.
• 11–15 years of experience developing standard and complex IT solutions and services based on business requirements and industry standards.
• Advanced technical expertise, including experience successfully leading a SOC team or unit and analyzing and correlating cybersecurity events, logs, and alerts in an enterprise environment.
• Ability to recognize and determine the root causes of exploits, vulnerabilities, and intrusions in host- and network-based systems.

• Review escalated cybersecurity events from Tier 2 analysts, distinguish malicious activity from benign events, and refer confirmed incidents to the Incident Response Lead.
• Analyze and correlate large datasets of logs, events, and alerts from enterprise network devices and applications; investigate incidents and recommend timely remediation.
• Proactively search log, network, and system data for previously undetected threats.
• Work with analysts and engineers to tune security tools and applications, adjust rules, develop response procedures, and reduce false-positive alerts.
• Identify and validate indicators of compromise and attack, then add them to network security tools to help protect the District of Columbia government network.
• Review technical advisories and assessments for quality before they are issued by the SOC.
• Provide expert technical support to enterprise technicians and staff resolving confirmed incidents.
• Share recurring issues identified through trend analysis with SOC management and recommend process and technical improvements to alerting and incident handling.
• Develop and coordinate technical best-practice standard operating procedures and runbooks for SOC analysts.
• Respond to requests for technical assistance by phone and other electronic channels, and independently resolve problems.
• Coordinate escalations with the Incident Response Lead and collaborate with internal technology teams to resolve issues promptly.

• Support
• Network
• Perl
• PowerShell
• Security
• TCP/IP
• ASP.NET

More:

We are recruiting for a Tier 3 SOC Analyst supporting OCTO, the District of Columbia government. This is a 12-month contract based in Washington, DC, with a listed rate of $75 per hour on a C2C basis. The role is 100% onsite and limited to local candidates in DC, Virginia, or Maryland; interviews are in person. The analyst serves as an advanced escalation resource and provides technical oversight to SOC analysts monitoring and responding to cybersecurity events affecting the Districts technology infrastructure.

last updated 41 week of 2026

Job Tags

Similar Jobs