Job Description
HonorVet Technologies. We're a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring
Job Title: Senior Level Security Operations Analyst
Duration: 12 months + Extension
Job Description:
The Client is seeking a senior-level Security Operations Analyst to strengthen detection, response, and orchestration capabilities across the agency's security operations. This role blends deep SOC (Security Operations Center) investigative expertise with hands-on security automation engineering, focusing on CrowdStrike Falcon and Torq to build scalable, AI-assisted detection and response workflows. The ideal candidate has practical experience integrating large language model (LLM) tools such as Claude into security operations — for triage acceleration, playbook generation, and analyst augmentation — while operating within a strict Zero Trust, defense-in-depth security posture appropriate.
Key Responsibilities
Job Title: Senior Level Security Operations Analyst
Duration: 12 months + Extension
Job Description:
The Client is seeking a senior-level Security Operations Analyst to strengthen detection, response, and orchestration capabilities across the agency's security operations. This role blends deep SOC (Security Operations Center) investigative expertise with hands-on security automation engineering, focusing on CrowdStrike Falcon and Torq to build scalable, AI-assisted detection and response workflows. The ideal candidate has practical experience integrating large language model (LLM) tools such as Claude into security operations — for triage acceleration, playbook generation, and analyst augmentation — while operating within a strict Zero Trust, defense-in-depth security posture appropriate.
Key Responsibilities
- Serve as a SOC analysis & Tier 3 escalation point for complex security incidents, performing deep-dive investigation, root cause analysis, and threat hunting across endpoint, network, cloud, and identity telemetry.
- Design, build, and maintain detection analytics, dashboards, and hunting queries (Falcon Query Language / FQL) within CrowdStrike Falcon, tuning correlation rules and detection logic to reduce false positives and improve mean-time-to-detect (MTTD).
- Architect and maintain security orchestration, automation, and response (SOAR) playbooks in Torq, integrating CrowdStrike Falcon, identity providers, ticketing, and communication platforms into automated response workflows.
- Design AI-assisted analyst workflows (e.g., automated triage summarization, alert enrichment, playbook drafting) using approved generative AI tooling, ensuring all inputs are sanitized and free of regulated or case-specific data.
- Lead incident response efforts for high-severity events, coordinating with IT, legal, and divisional stakeholders while strictly adhering to FTI/CJI handling restrictions.
- Develop and maintain detection engineering documentation, runbooks, and standard operating procedures (SOPs) for Tier 1/Tier 2 analyst use.
- Mentor and provide technical guidance to Tier 1 and Tier 2 SOC analysts; review and validate their investigative work and escalation quality.
- Continuously evaluate and integrate emerging SOC automation and AI capabilities, presenting proposals for tooling changes with documented risk and compliance analysis.
- Participate in an on-call rotation for critical incident escalations.
- 8 years Progressive SOC / security operations experience, including 2+ years functioning at a Tier 3 / senior analyst or detection engineering level.
- 8 years Hands-on production experience with CrowdStrike Falcon (Insight XDR, Discover, and/or Fusion SOAR), including custom detection/IOA authoring, Falcon Query Language (FQL) use, and dashboard development.
- 8 years Demonstrated experience building or maintaining SOAR automation (Torq strongly preferred).
- 8 years Practical, hands-on experience using AI/LLM tools (e.g., Claude, GPT-based tools) to support security operations, with clear understanding of data sanitization and safe-use boundaries in a regulated environment.
- 8 years Working knowledge of Zero Trust architecture principles (NIST 800-207) and general familiarity with regulatory frameworks such as IRS Pub. 1075, FBI CJIS Policy, and HIPAA.
- 8 years Strong scripting/automation ability (PowerShell, Python, or Falcon Query Language-based automation) for building custom detections and integrations.
- 8 years’ Experience documenting investigations, creating hunt reports, and communicating technical findings to diverse audiences.
- 8 years’ Ability to work independently while collaborating effectively within cross-functional cybersecurity teams.
- 8 years’ Ability to resolve complex security issues in diverse and decentralized environments; learn, communicate, teach new security technologies; and communicate effectively.
- 8 years’ Conduct forensic investigations on cyberattacks to determine how they occurred and can be prevented in the future.
- 8 years’ Experience creating/reviewing/updating security policies and standards for the public/private/hybrid cloud contexts.
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent professional experience.
- 1 Years GIAC certifications (GCIH, GCIA, GCFA) or equivalent.
- CrowdStrike Certified Falcon Responder (CCFR) or CrowdStrike Certified Falcon Administrator (CCFA), or equivalent CrowdStrike security certification.
- Torq certification or demonstrated portfolio of built automation workflows
- Experience designing AI-assisted playbooks or analyst copilots for SOC use cases while maintaining strict data-handling guardrails.
- Familiarity with Microsoft Defender XDR, Splunk, Entra ID Protection, and Tenable One / cloud security posture management (CSPM) tooling.
- Experience in government, legal, or law-enforcement-adjacent security environments
Numbers & Facts
| Location | Austin, TX (Remote) |
| Industry | Staffing/Employment Agencies |
| Salary | $90–$95 Per Hour |
| Company Size | 50 to 99 employees |
| Year Founded | 2015 |
| Website | http://www.honorvettech.com |
Benefits
401K, Employee Referral Program, Life Insurance
About Company
Is a leading Service Disabled Veteran Owned Small Business providing IT, Telecom and Medical Staffing.
Skills
- Analysis Skillsunmatched
- Artificial Intelligence (AI)unmatched
- Automationunmatched
- Automation Engineeringunmatched
- Cloud Computingunmatched
- Communication Skillsunmatched
- Computer Scienceunmatched
- Computer Securityunmatched
- Cross-Functionalunmatched
- Database Programming Languagesunmatched
- Defense in Depthunmatched
- Disability Accommodationsunmatched
- Documentationunmatched
- Federal Bureau of Investigation (FBI)unmatched
- Federal Governmentunmatched
- Fortune 500 Customersunmatched
- GCFA - GIAC Certified Forensic Analystunmatched
- GCIA - GIAC Certified Intrusion Analystunmatched
- GCIH - GIAC Certified Incident Handlerunmatched
- GIAC - Global Information Assurance Certificationunmatched
- Government Regulationsunmatched
- HIPAA (Health Insurance Portability and Accountability Act)unmatched
- Home Automationunmatched
- Huntingunmatched
- Hybrid Cloudunmatched
- ISO (International Organization for Standardization)unmatched
- ISO 9001unmatched
- Incident Responseunmatched
- Information/Data Security (InfoSec)unmatched
- Internet Securityunmatched
- Law Enforcementunmatched
- Legal Support Skillsunmatched
- Machine Toolunmatched
- Mentoringunmatched
- Microsoft Product Familyunmatched
- Modeling Languagesunmatched
- On Callunmatched
- Operational Auditunmatched
- Operational Supportunmatched
- Private Cloudunmatched
- Problem Solving Skillsunmatched
- Python Programming/Scripting Languageunmatched
- Regulationsunmatched
- Reporting Dashboardsunmatched
- Reporting Skillsunmatched
- Risk Analysisunmatched
- Root Cause Analysisunmatched
- Scalable System Developmentunmatched
- Scripting (Scripting Languages)unmatched
- Security Analysisunmatched
- Security Architectureunmatched
- Splunkunmatched
- Standard Operating Procedures (SOP)unmatched
- State Governmentunmatched
- Technical Leadershipunmatched
- Technical Recruitingunmatched
- Telemetryunmatched
- Training/Teachingunmatched
- U.S. National Institute of Standards and Technology (NIST)unmatched
- Use Casesunmatched
- Windows PowerShellunmatched
- Workflow Analysisunmatched
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder