SOC Analyst Tier III - 176178

Responsibilities: of the Tier 3 SOC Analyst: • Lead advanced incident response activities, including threat hunting, malware analysis, and forensic investigations. • Monitor, analyze, and respond to complex security events and alerts across enterprise environments. • Utilize Splunk to develop custom dashboards, searches, correlation rules, and detection content. • Conduct root cause analysis and provide detailed recommendations for remediation and mitigation. • Mentor junior SOC analysts and provide escalation support for high-priority security incidents. • Collaborate with engineering, infrastructure, and compliance teams to strengthen security posture. • Develop and maintain incident response procedures, playbooks, and security documentation. • Stay current on emerging cyber threats, attack techniques, and industry best practices. Qualifications: of the Tier 3 SOC Analyst: • Active Secret security clearance required. • 5+ years of experience in a Security Operations Center (SOC), Cyber Defense, or Incident Response role. • Strong hands-on experience with Splunk Enterprise for monitoring, alerting, and threat detection. • Experience investigating advanced persistent threats (APTs), ransomware, and sophisticated cyber attacks. • Knowledge of SIEM, EDR, IDS/IPS, and endpoint security technologies. • Familiarity with MITRE ATT&CK framework, threat intelligence, and security best practices. • Experience working within regulated or government-focused environments is highly preferred. • Relevant certifications such as Security+, CySA+, GCIA, GCIH, CISSP, or similar are preferred.