Security Operations

• Provide Tier III SOC support for security alert triage, complex incident investigations, forensic analysis, and escalation of advanced security threats across federal enterprise environments.
• Analyze security events, SIEM alerts, endpoint telemetry, network traffic, and threat intelligence to identify malicious activity, determine potential impact, and recommend containment and remediation actions.
• Maintain operational awareness of SOC security technologies, monitoring platforms, log sources, and telemetry to ensure continuous visibility into enterprise security posture and emerging threats.
• Lead advanced technical investigations, correlate security events across multiple data sources, perform root cause analysis, and coordinate incident escalation and response activities with cybersecurity stakeholders.
• Lead shift handovers, maintain incident documentation, and develop, review, and update SOPs, incident response playbooks, and operational workflows.
• Support Red Team and Purple Team exercises by evaluating detection capabilities, analyzing simulated attack activity, identifying monitoring gaps, and recommending improvements.
• Provide technical guidance and mentorship to junior SOC analysts and contribute to improvements in threat detection, incident handling, and SOC operational effectiveness.

Explore SOC Analyst IV at True Zero Technologies, LLC. Review requirements and application details.