Senior SOC Analyst

Peraton

. Monitor and investigate security alerts and perform threat hunting .

Posted 10/21/2026full-timeUnited StatesSenior💰 $104,000 - $166,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, including threat hunting, incident response, and security monitoring using SIEM tools like Splunk. Possesses strong analytical skills for investigating security alerts and improving system performance and security.

Highest-signal resume keywords

Cybersecurity ExperienceSIEM Platform ProficiencySPL Query DevelopmentSecurity+ CE CertificationActive SECRET Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingIncident ResponseNetwork Traffic AnalysisSPL QueryingDigital ForensicsLog AnalysisSecurity MonitoringVulnerability AssessmentTCP/IP UnderstandingBoolean Logic

Soft Skills

CommunicationMentoringCollaborationTechnical ExpertiseLeadership

Tools & Technologies

SplunkMicrosoft SentinelSIEM ToolsEDR ToolsFirewallIDS

Certifications & Qualifications

Security+ CESplunk Power User CertificationDoD 8570 IAT Level II Certification

Industry Keywords

SOCNIST StandardsRMFCybersecurity IncidentsAnomaly AnalysisCommon Threat VectorsHigh-Availability SystemsFederal Government EnvironmentOperating System HardeningCloud Security

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxSplunkTCP/IP

About the role

Key responsibilities & impact

Monitor and investigate security alerts and perform threat hunting
Notify managers, cyber incident responders, and cybersecurity service provider personnel of suspected incidents
Document event history, status, and potential impact according to the cyber incident response plan
Analyze and characterize network traffic for anomalous activity and threats
Create advanced ad hoc SPL queries
Coordinate investigations, risk assessments, and forensic analysis with internal and external teams
Review host, network traffic, firewall, and IDS logs for security threats
Use SIEM and EDR tools for operational security monitoring
Develop and document configuration standards, policies, procedures, and SOPs
Advise management and team members on technology risks and mitigation strategies
Provide technical expertise and thought leadership to multiple management levels
Prepare investigation, incident, and security activity reports
Identify and classify attack tactics and techniques
Recommend and implement improvements to system performance, security, and reliability
Build and refine SOC processes and procedures
Train and mentor junior SOC team members
Plan and execute SOC projects and initiatives
Communicate professionally with managers and colleagues
Take on additional responsibilities as needed

Requirements

What you’ll need

Bachelor’s degree and 8 years of experience, or Master’s degree and 6 years of experience, or Associate’s degree and 10 years of experience, or high school diploma/equivalent and 12 years of experience
U.S. citizenship
Active SECRET security clearance
Security+ CE or another DoD 8570 IAT Level II certification
5+ years of cybersecurity, SOC, or systems security experience in a federal government environment supporting business-critical, high-availability systems
3+ years of experience working with a SIEM platform, preferably Splunk
Experience using Splunk or similar dashboards and Microsoft Sentinel for security monitoring and analysis
4+ years of experience querying and analyzing security data, including SPL, with working knowledge of data types, conditions, and regular expressions
Working knowledge of system, network, and application security threats and vulnerabilities
Understanding of Boolean logic and event correlation
Experience identifying logging and monitoring gaps and improving security monitoring
Working knowledge of cybersecurity incidents, anomaly analysis, log analysis, digital forensics, and common threat vectors
Understanding of TCP/IP, UDP, network ports, protocols, and traffic flow
Familiarity with RMF and NIST standards, including NIST SP 800-53
Preferred: Splunk data normalization, Splunk Power User certification or higher, MITRE ATT&CK, cloud security, system administration, networking, operating system hardening, Linux, Windows, storage troubleshooting, scripting/coding, and WAF security features

Benefits

Comp & perks

Overtime eligibility may be available
Shift differential may be available
Discretionary bonus may be available