Cybersecurity Operations Center Analyst

BE EMPOWERED TO SUCCEED

Connect with others in our people‑first culture and enhance our collective ingenuity.

Learn how we’ll support you as you pursue a balanced, fulfilling life.

Discover what to expect during your journey as a candidate with us.

As a Cybersecurity Operations Center Cyber Analyst on our security operations center team, you’ll improve tier monitoring strategies and analyze threats, using state‑of‑the‑art tools and platforms. You’ll work with the team to comprehend, mitigate, and respond to threats quickly, restoring operations and limiting the impact. You’ll manage efforts to figure out just how many systems are affected and assist recovery efforts.

You’ll combine threat intelligence, event data, and assessments of events to identify patterns to understand attackers’ goals and stop them from succeeding. This is a great opportunity to continue to build your cybersecurity skills with hands‑on experience in threat assessment and incident response. Join us as we protect clients from malicious actors.

In this role, you’ll be counted on to understand cyberspace capabilities to evaluate potential weaknesses as well as the effectiveness of mitigations for cyber security solutions. You will leverage cyberspace operations systems to aggregate threat feeds that inform briefings for senior leadership aligned to our Army client.

This is an opportunity to use your research and analysis abilities to adequately assess and inform operators, senior leadership, and commanders on dynamic adversarial tactics, techniques, and procedures for our Security Operations Center data research. Your role will be vital in the development of operations plans to support command and control.

If you want to be in the fight, working shoulder to shoulder with our mission partner, influencing the most critical global cyber missions, this is the opportunity for you.

• 3+ years of experience working in a Security Operations Center at a classified level within the Department of Defense
• Experience providing continuous monitoring security expertise to business units and key stakeholders
• Experience working with cybersecurity staff to evolve the Security Operations continuous monitoring toolsets and reporting to provide better vulnerability insight
• Ability to serve as a subject‑matter expert on vulnerabilities, including system and application settings, and work alongside other security analysts in event handling and incident response
• Ability to perform configuration and deployment of vulnerability scanning and network assessment tools, such as Splunk, Elastic, or Microsoft Sentinel
• Ability to serve as a focal point for incident response and be responsible for communicating with other stakeholders
• TS/SCI clearance
• Bachelor’s degree
• CSSP Analyst or Incident Responder Certification;
  DoD approved 8140 baseline certification such as CFR, CCNA Cyber Ops, CCNA, CySA+, GCA, GCIH, GICS, Cloud+, or Pen Test+

• Experience using Elastic for monitoring and analysis
• Experience with endpoint tools to successfully hunt for adversarial behavior
• Ability to conduct threat hunting using network and host‑based information
• TS/SCI clearance with a polygraph
• Bachelor’s degree in a STEM field

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.

Individuals that do not meet this threshold are only eligible for select offerings, not…