Cybersecurity Operations Center Analyst

Cybersecurity Operations Center Analyst

As a Cybersecurity Operations Center Analyst on our security operations center team, you’ll improve tier monitoring strategies and analyze threats using state-of-the-art tools and platforms. You’ll work with the team to comprehend, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You’ll manage efforts to determine how many systems are affected and assist recovery efforts. You’ll combine threat intelligence, event data, and assessments of events to identify patterns and understand attackers’ goals to stop them from succeeding.

This is a great opportunity to continue building your cybersecurity skills with hands‑on experience in threat assessment and incident response.

• Improve tier monitoring strategies and analyze threats using advanced tools and platforms.
• Respond to threats quickly, mitigate impact, and restore operations.
• Determine scope of affected systems and assist in recovery.
• Combine threat intelligence, event data, and evaluations to identify attacker patterns.
• Conduct incident response and report findings to leadership.

• 3+ years of professional experience.
• Experience using endpoint tools to hunt for adversarial behavior.
• Knowledge of SIEMs, including content creation, alert response, and dashboard evaluation.
• Experience with network data and full‑packet capture analysis.
• Ability to analyze network and endpoint logs, conduct incident response, and report findings to leadership.
• Ability to conduct threat hunting using network and host‑based information.
• TS/SCI clearance.
• HS diploma or GED.
• DoD 8570 IAT II+ Certification.

• Experience working in a Security Operations Center (SOC) or Regional Cyber Center (RCC).
• Experience conducting digital forensics.
• Bachelor's degree.
• Experience with Splunk, Tanium, Trellix, pentesting, programming or scripting, or MDE certification.
• DoD 8570 CSSP Analyst or Incident Responder Certification.

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

• Remote
  :
  May require occasional on‑site work at a Booz Allen or customer facility.
• Hybrid
  :
  Expected to work from a Booz Allen facility frequently and may need to visit a customer facility.
• Onsite
  :
  Primarily performed at a Booz Allen office or customer facility.

Salary range: $69,400.00 to $ (annualized USD). This posting will close within 90 days from the posting date.

Booz Allen offers health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible for the full range of benefits.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.