SOC Analyst IV

True Zero Technologies, LLC

. Provide Tier III SOC support for security alert triage, complex incident investigations, forensic analysis, and escalation of advanced security threats across federal enterprise environments.

Posted 11/12/2026full-timeRemote • District of Columbia • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in Tier III SOC support, advanced incident investigation, and threat detection within federal enterprise environments, with a strong focus on security event analysis and operational effectiveness.

Highest-signal resume keywords

Security Operations Center (SOC) OperationsIncident ResponseSIEM PlatformsAdvanced Security Alert InvestigationThreat Detection

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Forensic AnalysisRoot Cause AnalysisEndpoint Detection and Response (EDR)Security Event CorrelationMalicious Activity IdentificationNetwork Traffic AnalysisThreat Intelligence AnalysisWindows Operating SystemLinux Operating SystemAWS-Native Security Capabilities

Soft Skills

Technical GuidanceMentorshipCommunication

Tools & Technologies

SIEM PlatformsMonitoring PlatformsTelemetry Tools

Certifications & Qualifications

GIAC Certified Incident Handler (GCIH)GIAC Certified Intrusion Analyst (GCIA)Certified Ethical Hacker (CEH)CompTIA Security+

Industry Keywords

Cybersecurity MonitoringIncident EscalationIndicators of Compromise (IOCs)Operational WorkflowsRed Team ExercisesPurple Team Exercises

Tech Stack

Tools & technologies

AWSCloudCyber SecurityLinux

About the role

Key responsibilities & impact

Provide Tier III SOC support for security alert triage, complex incident investigations, forensic analysis, and escalation of advanced security threats across federal enterprise environments.
Analyze security events, SIEM alerts, endpoint telemetry, network traffic, and threat intelligence to identify malicious activity, determine potential impact, and recommend containment and remediation actions.
Maintain operational awareness of SOC security technologies, monitoring platforms, log sources, and telemetry to ensure continuous visibility into enterprise security posture and emerging threats.
Lead advanced technical investigations, correlate security events across multiple data sources, perform root cause analysis, and coordinate incident escalation and response activities with cybersecurity stakeholders.
Lead shift handovers, maintain incident documentation, and develop, review, and update SOPs, incident response playbooks, and operational workflows.
Support Red Team and Purple Team exercises by evaluating detection capabilities, analyzing simulated attack activity, identifying monitoring gaps, and recommending improvements.
Provide technical guidance and mentorship to junior SOC analysts and contribute to improvements in threat detection, incident handling, and SOC operational effectiveness.

Requirements

What you’ll need

Minimum of 6 years of progressive experience in Security Operations Center (SOC) operations, cybersecurity monitoring, threat detection, incident response, or related security disciplines, including advanced incident investigation and escalation responsibilities.
Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), Certified Ethical Hacker (CEH), or CompTIA Security+.
Demonstrated hands-on experience with SIEM platforms, security event correlation, endpoint detection and response (EDR) technologies, endpoint telemetry analysis, and advanced security alert investigation within enterprise environments.
Strong technical knowledge of Windows and Linux operating systems, network protocols, enterprise networking, and AWS-native security capabilities, including experience investigating security events across on-premises and cloud environments.
Proven ability to conduct complex security investigations, analyze potential indicators of compromise (IOCs), document technical findings, execute incident escalation procedures, and communicate actionable security recommendations to technical teams and federal stakeholders.