Senior Security (SOC) Analyst, Secret Clearance Required

Senior Security (SOC) Analyst

UltraViolet Cyber is a leading platform-enabled unified security operations company that provides a comprehensive suite of security operations solutions to the Fortune 500, Federal Government, and Commercial clients. The Senior Security (SOC) Analyst will monitor and analyze security events and alerts reported by the SIEM on a 24x7 basis to identify and investigate suspicious or malicious activity or other cyber events that violate policy.

Responsibilities

• Monitor security events and alerts from the SIEM on a 24x7 basis.
• Analyze logs and events from a wide variety of device types, including non‑traditional feeds such as HR data, badging information, and physical security devices.
• Document all investigations, maintaining detailed records of collected evidence.
• Record all artifacts (emails, logs, documents, URLs, screenshots, etc.) associated with security events and incidents within the SOC incident and tracking application.
• Work with a team that rotates 3x12 or 4x12 hour shifts.
• Maintain operational status of monitoring components, escalating and reporting outages.

Qualifications

• Active US Secret Security Clearance.
• 5+ years of experience working in a SOC or NOC environment performing security event monitoring and analysis.
• Working knowledge of Windows, OS X, Linux, and common operating‑system deployments.
• Working knowledge of network communications and routing protocols (TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).
• Familiarity with adversarial tactics, techniques, and procedures (TTPs).
• Capable of analyzing security logs and events from firewalls, IDS/IPS, HIDS/HIPS, proxy/web filter, vulnerability scans, routers, NetFlow, VPN gateways, server event logs, anti‑virus, DNS services, DHCP, NAT devices, MDM, PKI, and cloud security infrastructure (AWS, Azure, Oracle, Salesforce, etc.).
• Certified in Security+ or equivalent; additional certifications such as GCIH, CEH, CYSA+ are desirable.
• Experience with Splunk query language, IDS/IPS/firewall/security configurations, signature development, PCAP analysis, Tanium threat response, and ticket‑management systems.
• Strong verbal and written communication skills, able to produce clear and thorough incident reports and briefings.
• Knowledge of Windows Active Directory is a plus.
• Experience with SIEM platforms that perform log collection, analysis, correlation, and alerting.
• Experience in implementing counter‑measures or mitigating controls for deployment in an enterprise network environment.
• Ability to collect and maintain investigation information in a format that supports situational awareness and law‑enforcement investigation efforts.
• High school diploma required.
• Must be legally authorized to work in the United States and work onsite five days per week in Herndon, VA.
• No third‑party candidates will be considered.

Benefits

• 401(k) with employer match of 100 % of the first 3 % contributed and 50 % of the next 2 % contributed.
• Medical, Dental, and Vision Insurance (effective after the first day of the month following employment).
• Group Term Life, Short‑Term Disability, Long‑Term Disability.
• Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness coverage.
• Participation in the Discretionary Time Off (DTO) Program.
• 11 paid holidays annually.

Equal Opportunity Statement

UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.

Closing

If you want to make an impact, UltraViolet Cyber is the place for you!