Security Analyst - XDR - Mid Level

FITS East:
Arlington, VA; FITS West:
Bellevue, WA

Location: On Site ONLY (Crystal City VA, Bellevue WA)

Type: Full-Time

Clearance Required: CJIS

Salary Range: $115,000 – $135,000 (commensurate with location and experience)

The Mid Security Analyst – XDR supports extended detection and response (XDR) operations for state and local government customers in a highly regulated environment. This role performs independent investigation and analysis of security alerts and incidents, validates detections, and provides escalation guidance and response recommendations within defined operational procedures.

Mid-level analysts are expected to apply sound judgment during investigations and perform deeper investigative and exploratory analysis, including pivoting beyond initial alerts to identify related or previously undetected activity. The role also supports service onboarding activities and participates in limited external stakeholder communications as a technical contributor.

This is an on-site, shift-based role within a 24x7x365 security operations model and contributes to operational quality, consistency, and continuity across shifts.

• Independently investigate and analyze security alerts and incidents using XDR and SIEM tooling
• Perform deeper investigative and exploratory analysis, including pivoting beyond initial alerts to validate scope, impact, or related activity
• Provide response recommendations and escalation guidance in accordance with defined procedures
• Support and guide junior analysts during investigations, including quality review of alert handling and documentation
• Participate as a technical contributor in customer onboarding activities and limited external stakeholder communications
• Document investigation findings clearly and contribute to identification of detection gaps, trends, or service improvement opportunities

• S. citizenship and ability to obtain CJIS access upon hire, including background check and fingerprinting
• 3+ years of experience in security operations, incident analysis, or a related cybersecurity role
• Hands-on experience investigating security alerts using XDR and/or modern SIEM/SOAR platforms
• Ability to independently analyze incidents and make escalation or response recommendations
• Strong written documentation and communication skills

• Exposure to cloud-based security platforms, particularly Microsoft cloud environments
• Working knowledge of attacker techniques, common alert patterns, and false positives
• Experience using query languages such as KQL to support investigations
• Prior experience mentoring or supporting junior analysts during investigations
• Progress toward or attainment of a security-focused certification

FITS is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. FITS is committed to the principle of equal employment opportunity for all employees and to provide employees with a work environment free of discrimination and harassment. All employment decisions at FITS are based on business needs, job requirements, and individual qualifications, regardless of race, color, ethnicity, age, religion or belief, sex, sexual orientation, gender identity and/or expression, national origin, family or parental status, disability, military or veteran status, or any other status protected by the laws or regulations in the locations where we operate.