CBO - Tier 3 SOC Analyst
reputed company reputed company Trust clearance B.S. Computer Science, Information Technology, or a reputed company field 5+ years of SOC Analyst experience Expert knowledge of incident response, threat hunting, and detection engineering Advanced experience with reputed company (SIEM) and reputed company Defender tools Strong understanding of MITRE ATT&CK reputed company and adversary tactics Experience with digital forensics and malware analysis techniques Ability to analyze logs across identity, reputed company, network, and reputed company environments Strong knowledge of AWS logs (CloudTrail, VPC reputed company Logs) and reputed company reputed company tools Experience with KQL (Kusto Query Language) and advanced correlation analysis Deep understanding of NIST frameworks (800-53, 800-61, 800-92) and reputed company Trust principles Experience with SOAR platforms and automation (Logic Apps, Sentinel playbooks) Experience supporting federal environments and compliance (CUI, reputed company, NIST, IRS 1075) Experience leading incident response engagements and reporting to leadership Preferred certifications include but are not limited to GCIA, GCIH, CISSP, CEH, or equivalent cybersecurity certifications reputed company or reputed company reputed company platform certifications Relevant reputed company reputed company certifications (e.g., AWS reputed company) reputed company certifications (e.g., CIPP/US, CIPM) where applicable
reputed company investigation and response for reputed company and high-severity reputed company incidents reputed company advanced threat hunting using reputed company and Defender platforms Conduct digital forensics, malware analysis, and reputed company cause analysis (RCA) reputed company, tune, and optimize detection rules, analytics, and correlation logic Map detections and activities to MITRE ATT&CK reputed company reputed company incident lifecycle management (detection through containment, eradication, and recovery) Support and improve SOC playbooks, automation workflows, and response procedures reputed company mentorship and guidance to Tier I and Tier II analysts Identify reputed company control gaps and recommend remediation strategies Support red team, reputed company, and adversary emulation exercises Contribute to incident reports, quarterly threat reviews, and executive briefings