SOC Analyst

Peraton

. Monitor and investigate security alerts and perform threat hunting .

Posted 10/26/2026full-timeVirginia • United StatesMid-LevelSenior💰 $80,000 - $128,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident response, threat hunting, and security monitoring using SIEM tools like Splunk. Proficient in analyzing network traffic, documenting security incidents, and developing security policies and procedures.

Highest-signal resume keywords

Cybersecurity ExperienceSIEM Platform ProficiencySPL Query DevelopmentSecurity+ CE CertificationThreat Analysis and Forensics

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingIncident ResponseNetwork Traffic AnalysisSPL QueryingDigital ForensicsLog AnalysisSecurity MonitoringVulnerability AssessmentTCP/IP UnderstandingBoolean Logic

Soft Skills

CommunicationMentoringCollaborationTechnical LeadershipProblem-Solving

Tools & Technologies

SplunkMicrosoft SentinelSIEM ToolsEDR ToolsFirewallIDS

Certifications & Qualifications

Security+ CESplunk Power User Certification

Industry Keywords

SOCCybersecurity FrameworksNIST StandardsRMFFederal Government Environment

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxSplunkTCP/IP

About the role

Key responsibilities & impact

Monitor and investigate security alerts and perform threat hunting
Notify designated managers, cyber incident responders, and cybersecurity service provider personnel of suspected incidents
Document event history, status, and potential impact according to the cyber incident response plan
Analyze and characterize network traffic to identify anomalous activity and potential threats
Create advanced ad hoc SPL queries
Coordinate with internal and external teams to investigate threats, assess risks, and conduct forensic analysis
Review host, network traffic, firewall, and IDS logs for potential security threats
Use SIEM and EDR tools to monitor the operational environment
Develop and document configuration standards, policies, and procedures for securing system infrastructure
Advise management and team members on technology risks and mitigation strategies
Provide technical expertise and thought leadership to multiple levels of management
Prepare reports on investigations, incidents, and security-related activities
Identify and classify attack tactics and techniques
Recommend and implement enhancements to improve performance, security, and reliability
Build and refine SOC processes and procedures and document work in SOPs
Train and mentor junior SOC team members
Plan and execute SOC-related projects and initiatives
Communicate with managers and colleagues and take on additional responsibilities as needed

Requirements

What you’ll need

Bachelor’s degree and 5 years of experience, or an associate degree and 7 years of experience, or a high school diploma/equivalent and 9 years of experience
U.S. citizenship
Active SECRET security clearance
3+ years of cybersecurity, SOC, or systems security experience in a federal government environment supporting business-critical, high-availability systems
3+ years of SOC or cybersecurity-related experience
Experience working with a SIEM platform, preferably Splunk
Experience using Splunk dashboards and Microsoft Sentinel for security monitoring and analysis
Experience querying and analyzing security data, including SPL, with a working understanding of data types, conditions, and regular expressions
Working knowledge of system, network, and application security threats and vulnerabilities
Understanding of Boolean logic and event correlation
Experience identifying logging and monitoring gaps and supporting efforts to improve security monitoring
Working knowledge of cybersecurity incidents, anomaly analysis, log analysis, digital forensics, and common threat vectors
Understanding of TCP/IP, UDP, network ports, protocols, and traffic flow
Security+ CE or other DoD 8570 IAT Level II certification
Familiarity with cybersecurity frameworks and specifications, including RMF and NIST standards such as NIST SP 800-53
Preferred: Experience with Splunk data normalization, Splunk Power User certification or higher, MITRE ATT&CK, cloud security, system administration, networking, operating system hardening, Linux, Windows, storage troubleshooting, scripting or coding, and WAF security features

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Overtime eligibility
Shift differential eligibility
Discretionary bonus eligibility