Senior Security Operations Center; SOC Analyst Security Clearance

Position: Senior Security Operations Center (SOC) Analyst with Security Clearance
Join Sev1

Tech as a Senior SOC Analyst! In this mission-critical role, you will support the design, implementation, and operation of mesh

ONE-T, the ground component of the United States Space Force's mesh

ONE enterprise. You will provide cybersecurity monitoring, threat detection, incident response, and vulnerability management in alignment with Department of Defense (DoD) cybersecurity policies, including DoD Instruction 8040.03, the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), and DISA STIG compliance. This position directly supports the cybersecurity posture of Air Force and Space Force systems. If you thrive in fast-paced environments and are passionate about defending mission-critical networks, we invite you to join our innovative team in Colorado Springs, CO.

JOB OVERVIEW As a Senior SOC Analyst, you will:
* Monitor, analyze, and respond to security events using SIEM tools.

* Perform threat and vulnerability analysis and incident response.

* Support penetration testing, cyber assessments, and risk mitigation activities.

* Ensure compliance with DISA STIGs, RMF controls, and DoD cybersecurity policies.

* Collaborate with administrators and mission partners to harden systems and remediate vulnerabilities.

* Contribute to contingency planning (CP) and incident response (IR), and Continuity Of Operations (COOP) exercises.

* Support audit preparation and lead security assessments as required.

* Lead coordinated incident response efforts by executing detection, containment, eradication, and recovery activities in accordance with NIST SP 800-61 Rev. 3 guidelines; document all actions taken, conduct root cause analysis, and provide after-action reporting to strengthen organizational resilience. JOB RESPONSIBILITIES Threat Monitoring & Response
* Proactively monitor SIEM, IDS/IPS, and endpoint security tools for suspicious activity and indicators of compromise (IOCs).

* Correlate security events from multiple data sources to identify potential intrusions.

* Escalate confirmed incidents and coordinate with stakeholders for rapid response.
Vulnerability Management
* Conduct vulnerability scans across networks, systems, and applications; prioritize remediation based on risk.

* Track, patch, and verify remediation efforts to ensure compliance with DoD STIGs and NIST controls.

* Provide mitigation strategies for zero-day vulnerabilities or delayed patches.
Incident Response
* Lead containment, eradication, and recovery efforts during active cyber incidents.

* Document all incident response actions for lessons learned and continuous improvement.

* Support tabletop exercises and live simulations to test incident readiness.
Compliance & Risk Management
* Support RMF activities by implementing and assessing NIST SP 800-53 Rev. 5 security controls.

* Assist in preparation and maintenance of ATO packages for FISMA Moderate and High environments.

* Provide risk analysis and recommendations to leadership in accordance with DoD Instruction 8040.03.
Testing & Assessments
* Support Red Team, Blue Team, and Purple Team operations to validate network defenses.

* Perform penetration testing and emulate adversary TTPs to uncover weaknesses.

* Develop remediation plans in collaboration with engineers and administrators.
Audit Support
* Prepare audit-ready documentation for all applicable compliance frameworks (RMF, FISMA, FedRAMP, HIPAA, SOX, ISO).

* Participate in internal and external audits by providing evidence of control implementation.

* Track findings, provide corrective action plans, and ensure timely closure of audit items.
Collaboration & Training
* Coordinate with system administrators, engineers, and mission partners to implement secure configurations.

* Provide cybersecurity awareness training to technical and non-technical staff.

* Participate in cross-functional working groups to share threat intelligence and best practices.
POSTION DETAILS
* Job Type: Full-Time, Monday through Friday. May require after-hours response for urgent incidents.

* Work Environment:
In-office SOC support with some hybrid flexibility.

* Location:

Colorado Springs, CO (Sev1

Tech office).

* Travel:
Limited, primarily within the…