senior security analyst

OCT Consulting LLC

<div>
 
 Senior Security Operations Analyst
 
 
 
 OCT Consulting is a business management and technology consulting firm that supports Federal Government clients. We provide consulting services in the areas of Strategy, Process Improvement, Change Management, Program and Project Management, Acquisition/Procurement, and Information Technology.
 
 
 
 Responsibilities And Duties
 
 
 
 OCT currently has an opening for a Senior Security Operations Analyst to work with our federal client. The client requires a Senior Security Operations Analyst to support the agency's cybersecurity program at its Washington, DC headquarters. This position focuses on security monitoring, analysis, incident response, and continuous monitoring across the client's hybrid IT infrastructure.
 
 
 
 This position is contingent upon contract award.
 
 
 
 
 Day to day responsibilities include:
 
 
 
 <ul>
 <li>
 Perform all security analysis activities according to established standards and best practices
 </li>
 <li>
 Maintain threat awareness and monitor information systems for exploits and suspicious activities; analyze aggregated logs and reports from security tools
 </li>
 <li>
 Develop and execute a daily security analysis and reporting checklist to ensure comprehensive coverage of security monitoring activities.
 </li>
 <li>
 Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.
 </li>
 <li>
 Adhere to continuous monitoring practices to evaluate effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of information systems.
 </li>
 <li>
 Develop detection and response configuration policies to increase automation and alerting
 </li>
 <li>
 Develop incident handling procedures and execute incident response activities including all associated actions according to the incident response plan.
 </li>
 <li>
 Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.
 </li>
 <li>
 Collect security operations performance and security posture management metrics and prepare threat reports to inform risk management decisions.
 </li>
 <li>
 Support the development and maintenance of security operations documentation and standard operating procedures.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Must be a U.S. Citizen.
 </li>
 <li>
 Minimum six (6) continuous years of experience in security operations analysis in a federal government environment
 </li>
 <li>
 Demonstrated experience with security log analysis, threat detection, and incident response in a SOC or similar operational security environment.
 </li>
 <li>
 Hands-on experience with SIEM platforms, EDR/NDR tools, and security monitoring technologies
 </li>
 <li>
 Strong knowledge of NIST guidelines, FISMA requirements, and federal cybersecurity frameworks.
 </li>
 <li>
 Experience developing and executing security checklists, SOPs, and incident handling procedures.
 </li>
 <li>
 Familiarity with continuous monitoring practices, threat hunting, and security posture management
 </li>
 <li>
 Experience preparing security metrics, threat reports, and risk management briefings for senior leadership
 </li>
 <li>
 Security+, GCIA, GCIH, CYSA+, or equivalent security analyst certification required.
 </li>
 <li>
 Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field preferred; relevant IT certifications may be substituted for a formal degree.
 </li>
 <li>
 Ability to obtain and maintain a Public Trust clearance; background investigation will involve credit, fingerprint, and law enforcement agency checks.
 </li>
 <li>
 Must work primarily onsite in SW, Washington, DC 20024; limited remote work may be authorized
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 OCT offers competitive compensation packages and a full suite of benefits which includes:
 
 
 <ul>
 <li>
 Medical, Dental, and Vision insurance
 </li>
 <li>
 Retirement savings 401K plan provided by an industry leading provider with 3% employer contributions of the employee's gross salary
 </li>
 <li>
 Paid Time Off and Standard Government Holidays
 </li>
 <li>
 Life Insurance, Short- and Long-Term disability benefits
 </li>
 <li>
 Training Benefits
 
 
 </li>
 </ul>
 Salary Range: $100,000 - $130,000 yearly commensurate with experience, education, etc.
 
 
 About OCT Consulting OCT Consulting LLC is a Small Business (SB) providing professional services and information technology solutions to the Federal government and commercial clients. Founded in 2013, we bring the agility of operations and a management team with a track record of leading successful engagements at major Federal government agencies.
 
 
 At OCT we believe in creating a work environment where employees can thrive based on their abilities, skills, and achievements. We are dedicated to providing career growth and professional development based on individual merit and fostering a workplace where everyone's contributions are valued and recognized.
</div>

Senior Security Operations Analyst (15.40)

Otoe Missouria Group

<div><h3 class="jobSectionHeader">About Us</h3>
Otoe Missouria Group (OMG) is a tribally owned business dedicated to delivering high-quality solutions across a range of industries. Our company supports federal, commercial, and tribal clients with expert program management, project oversight, and numerous other services.
<h3 class="jobSectionHeader">Position Summary</h3>
OMG Federal is proactively identifying talented professionals who embody our entrepreneurial spirit and commitment to service. This position is not currently funded but is expected as part of upcoming program requirements. Candidates will be notified as funding and hiring timelines are confirmed. We encourage all qualified applicants to apply.
We are currently seeking a Senior Security Operations Analyst to support cybersecurity operations within a federal environment in Washington, DC. This role is focused on continuous monitoring, alert triage, and incident response execution to protect mission-critical systems. The ideal candidate brings strong analytical capabilities, hands-on SOC experience, and familiarity with federal cybersecurity practices.
<h3 class="jobSectionHeader">Key Responsibilities</h3>
<ul><li>Perform continuous monitoring of security events and alerts across enterprise systems</li>
<li>Analyze and triage alerts from SIEM and threat detection tools to determine severity and impact</li>
<li>Execute incident response procedures, including containment, eradication, and recovery actions</li>
<li>Conduct detailed log analysis to identify suspicious activity and indicators of compromise</li>
<li>Escalate and document security incidents in accordance with established procedures</li>
<li>Support development and refinement of detection rules, alerts, and use cases within SIEM platforms</li>
<li>Collaborate with cybersecurity engineers and leadership to strengthen defensive capabilities</li>
<li>Maintain accurate and detailed incident records, reports, and documentation</li>
<li>Ensure alignment with federal cybersecurity standards, policies, and best practices</li>
<li>Participate in shift-based operations as required to support 24/7 monitoring environments</li>
</ul>
Minimum Qualifications
<ul><li>A bachelor&rsquo;s degree in computer science or a closely related field is preferred; A high school diploma or equivalent is required.</li>
<li>Six plus (6+) years of experience in security operations, SOC analysis, or incident response in a federal agency is required</li>
<li>CompTIA Security+</li>
<li>CompTIA CySA+ (Cybersecurity Analyst Certification)</li>
<li>Hands-on experience with:
<ul><li>SIEM platforms and alerting systems</li>
<li>Log analysis across network, endpoint, and cloud environments</li>
<li>Threat detection and monitoring tools</li>
</ul></li><li>Demonstrated experience in:
<ul><li>Daily cyber monitoring and alert triage</li>
<li>Incident response execution within a structured environment</li>
<li>Supporting cybersecurity operations in a federal environment</li>
</ul></li><li>Strong understanding of cybersecurity principles, threat vectors, and attack methodologies</li>
<li>Ability to analyze complex data sets and respond to security incidents under pressure</li>
<li>Strong communication and documentation skills</li>
<li>An active Public Trust or had one in a recent position</li>
<li>Requires US Citizenship</li>
</ul>
Preferred Qualifications
<ul><li>Experience supporting federal compliance frameworks (e.g., NIST, FISMA)</li>
<li>Familiarity with ticketing systems and SOC workflows</li>
<li>Exposure to cloud security monitoring (e.g., Azure, AWS)</li>
<li>Experience in 24/7 Security Operations Center (SOC) environments</li>
</ul>
Work Environment &amp; Schedule
<ul><li>Full-time, on-site role based in Washington DC.</li>
<li>Travel may be required based on project and stakeholder needs.</li>
</ul>
Why OMG Federal
OMG Federal partners with government agencies to deliver mission-focused solutions across cybersecurity, IT modernization, and operational support. Our team operates at the intersection of innovation and national security, providing professionals the opportunity to work on impactful programs in a collaborative and growth-oriented environment.
Equal Employment Opportunity (EEO) Statement
Otoe-Missouria Group, LLC (OMG) is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected under federal, state, or local law. We are committed to fostering an inclusive and diverse workplace.</div>

Senior Security Operations Analyst

NexThreat

NexThreat is seeking a Senior Security Operations Analyst (Security Operations Analyst 3) to support contractor-led security operations activities with limited supervision from NIGC federal staff. This role is responsible for performing security monitoring, log analysis, threat awareness, detection/response tuning, continuous monitoring validation, incident response support, and security reporting aligned to established security standards and NIGC goals for protecting sensitive information.Key Responsibilities:The candidate will perform the following activities with minimal supervision and guidance:Security Analysis &amp; Monitoring<ul><li>Perform security analysis activities according to established standards.</li><li>Maintain threat awareness and continuously monitor NIGC information systems for exploits and suspicious activities.</li><li>Analyze aggregated logs and reporting outputs from security tools (including Syslog and SIEM sources).</li><li>Execute security monitoring and analysis tasks in alignment with a daily operational cadence.</li></ul>Daily Reporting Checklist Execution<ul><li>Develop and maintain a daily security analysis and reporting checklist.</li><li>Execute checklist activities daily, ensuring timely detection, triage support, and reporting of security findings.</li></ul>Detection Engineering &amp; Automation Enablement<ul><li>Develop detection and response configuration policies to increase automation and improve alerting and detection quality.</li><li>Support the tuning and validation of detection logic across relevant controls (including EDR, NDR, firewalls, and cloud security tooling).</li></ul>Continuous Monitoring &amp; Threat Hunting<ul><li>Adhere to continuous monitoring practices to evaluate effectiveness of implemented security controls.</li><li>Execute proactive threat hunting activities to ensure confidentiality, integrity, and availability (CIA) of NIGC information systems.</li><li>Evaluate the effectiveness of security analysis activities against best practices and recommend improvements.</li></ul>Incident Handling &amp; Response Support<ul><li>Develop incident handling procedures aligned to NIGC processes and requirements.</li><li>Execute incident response activities and perform associated actions according to the NIGC incident response plan.</li><li>Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.</li></ul>Security Metrics &amp; Threat Reporting<ul><li>Collect security operations performance metrics and NIGC security posture management metrics.</li><li>Prepare NIGC threat reports that inform risk management decisions and support leadership situational awareness.</li></ul>Required Skill Areas / TechnologiesThe Senior Security Operations Analyst will support environments utilizing the following technologies and practices:<ul><li>Cisco Networking</li><li>Cisco Firewall</li><li>Microsoft Cloud Technologies (IaaS, PaaS, SaaS)</li><li>Microsoft Identity Management: Microsoft Entra ID</li><li>Multi-Factor Authentication (MFA)</li><li>Mobile Device Management (iOS)</li><li>Linux Operating System Administration</li><li>Endpoint Detection and Response (EDR)</li><li>Network Detection and Response (NDR)</li><li>Patch Management</li><li>PowerShell</li><li>Log Management (Syslog)</li><li>Security Information and Event Management (SIEM)</li><li>Security Orchestration, Automation, and Response (SOAR)</li><li>Disaster Recovery (DR) support</li></ul>Required Qualifications<ul><li>Senior-level experience performing security operations and security analysis in enterprise environments.</li><li>Demonstrated experience with SIEM and log management (including Syslog), and using aggregated security telemetry for investigation and reporting.</li><li>Demonstrated experience maintaining threat awareness, triaging suspicious activity, and supporting incident response.</li><li>Strong understanding of continuous monitoring practices and proactive threat hunting.</li><li>Experience developing and maintaining detection/response configuration policies and improving alerting quality through automation.</li><li>Experience reporting security posture and operational effectiveness using measurable metrics.</li><li>Working knowledge of Microsoft Entra ID and MFA, endpoint security tooling (EDR), and network security detection tooling (NDR).</li><li>Proficiency with Linux administration and scripting/automation using PowerShell.</li><li>Ability to execute security tasks with limited supervision and consistently follow established standards and operational procedures.</li></ul>Preferred Qualifications<ul><li>Experience supporting environments that integrate Cisco network/security controls with Microsoft cloud security services.</li><li>Experience supporting security orchestration/automation workflows (SOAR) to improve detection and response efficiency.</li><li>Experience validating DR readiness and supporting recovery-related security considerations.</li><li>Relevant cybersecurity certifications (e.g., Security+, CySA+, GIAC, Microsoft Security, or comparable credentials).</li></ul>Pay: $83,164.40 - $100,154.98 per yearBenefits:<ul><li>401(k)</li><li>Dental insurance</li></ul>Work Location: In person

Security Operations Analyst 3, Senior

Visual Soft, Inc

<div>Visual Soft, Inc is seeking qualified candidates to work on our efforts with a Prime for their end customer, a federal agency. 
 
Position: Senior SOC - Security/Resource Management Analyst - (US Citizenship is a MUST) - (4 days ONSITE and 1 day REMOTE at Present, however, it may go 100% ONSITE in the near future) 
Location: Washington, DC, next to Union Station metro 
Compensation: Based on certifications, education and experience, very competitive 
Various Shifts available. SHIFT TIMINGS: 
2nd - M-F 3PM-11:30PM 
<h2 class="jobSectionHeader">Candidates Willing to work in any Shift 2 or any other shifts are highly desired</h2>
JOB DESCRIPTION: 
The Senior SOC/Resource Management Analyst has the primary responsibility of aggressively monitoring and responding to alerts triggered in the SIEM tool or requests for assistance from customers. The Senior SOC/Resource Management Analyst will use a variety of tools to investigate incidents and take immediate action or recommend a course of action to safeguard the U.S. Courts systems. 
 
General Experience: 
****PRIOR or ONGOING experience (6 yrs+) of working in a SOC environment is a MUST.**** 
 
Please do 'not; apply if you do 'NOT' have above professional experience. 
 
Six (62)+ years of network intrusion detection experience. Contractor must have the following skills: The ability to investigate and evaluate network traffic, and the ability to read and interpret log and sniffer packets, Wireshark. The ability to analyze data from a variety of sources over time and create a logical narrative of observed behavior, and the ability to communicate clearly both orally and in writing. In this role, the candidate is also required to be in a lead role must be able to function as resource management analyst and mentor and manage a team of 3 SOC analysts. 
 
Specialized Experience:
 
Candidate will have at six (6)+ years experience performing intrusion detection analytics working with the examination of logs and console events in the following working experience areas of; Splunk, examining Snort based IDS events, PCAP, web server log review, and working in a SIEM environment. 
**SPLUNK SIEM advanced queries HANDS-ON experience highly desired. 
 
Years of Experience: 6+ years 
Education Requirement: BS degree preferred, industry certifications are desired such as Security+ or CySA+ or CEH or CISSP or GCIH and other industry recognized certs. SPLUNK certifications are highly desired but NOT required 
Clearance requirement: U.S. Citizenship is required. 
 
Standard Benefits: 
 Our standard benefits include: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. Dependents coverage for health and dental insurances is available as an out of pocket expense for employees. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees or w-2 employees with no benefits will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all w-2 employees are eligible to be part of company's profit sharing, no employee contributions required.</div>

Senior SOC Security/Resource Mgmt Analyst / US Citizenship / 100% ONSITE

GovBidWriters LLC

Agency: NATIONAL INDIAN GAMING COMMISSIONThe contractor must provide a senior security analysis who will perform activities as follows with minimal supervision and guidance:a. Perform all security analysis activities according to established standards.b. Maintain threat awareness and monitor NIGC information systems for exploits and any suspicious activities; analyze aggregated logs and reports from security tools.c. Develop a daily security analysis and reporting checklist and execute activities identified in the checklist.d. Evaluate effectiveness of security analysis activities compared to best practices and recommend improvements.e. Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.f. Develop detection and response configuration policies to increase automation and alerting.g. Develop Incident handling procedures.h. Execute Incident Response activities to include all associated actions according to the NIGC incident response plan.i. Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.j. Collect security operations performance and NIGC security posture management metrics and prepare NIGC threat reports to inform risk management decisions.Work Location: In person

SECURITY OPERATIONS ANALYST 3

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a 3rd shift (11pm - 7:30am) Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead onsite in Washington, DC.</div>
Responsibilities:
<ul><li>Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client</li><li>
Provides timely and actionable sanitized intelligence to cyber incident response professionals</li><li>
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture</li><li>
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks</li><li>
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber security experience (or commensurate experience)</li><li>
7 years of security intrusion detection examination experience involving a range of security technologies that product logging data; to include wide area networks host and network IPS/IDS/HIPs traffic event review, server web log analysis, raw data logs</li><li>
Working experience of Splunk SIEM. Contractor will have at least two years as a cyber security or security operations shift team leader</li><li>
At least five years&rsquo; experience working at a senior level, performing analytics examination of logs and console events in the following working experience areas of; creating advance queries methods in Splunk or advance Grep skills, firewall ACL review, examining Snort based IDS events, Pcaps, web server log review, and working in a SIEM environment</li></ul> 
<div></div>
Posted Salary Range: USD $108,310.00 - USD $150,000.00 /Yr.</div>

Intrusion Detection Team Lead - 3rd shift

<div>Overview:
<div>
GovCIO is currently hiring for a 2nd shift (3pm - 11:30pm) Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead onsite in Washington, DC.</div>
Responsibilities:
<ul><li>Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyber threats to the client</li><li>
Provides timely and actionable sanitized intelligence to cyber incident response professionals</li><li>
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture</li><li>
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks</li><li>
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber security experience (or commensurate experience)</li><li>
7 years of security intrusion detection examination experience involving a range of security technologies that product logging data; to include wide area networks host and network IPS/IDS/HIPs traffic event review, server web log analysis, raw data logs</li><li>
Working experience of Splunk SIEM. Contractor will have at least two years as a cyber security or security operations shift team leader</li><li>
At least five years&rsquo; experience working at a senior level, performing analytics examination of logs and console events in the following working experience areas of; creating advance queries methods in Splunk or advance Grep skills, firewall ACL review, examining Snort based IDS events, Pcaps, web server log review, and working in a SIEM environment</li></ul> 
<div></div>
Posted Salary Range: USD $108,310.00 - USD $150,000.00 /Yr.</div>

Intrusion Detection Team Lead - 2nd shift

Explore 409+ Senior security analyst in Washington this May. Find roles across top companies and apply now to boost your career.