Senior Security Operations Center; SOC Analyst

Dice is the leading career destination for tech experts at every stage of their careers. Our client, Future Soft Consulting Inc., is seeking the following. Apply via Dice today!

Future Soft Consulting Inc. is seeking a highly skilled and detail-oriented Senior Security Operations Center (SOC) Analyst to support advanced cybersecurity operations for a major public‑sector organization in the State of Georgia. This position is fully onsite and will play a critical role in protecting enterprise information systems, monitoring security events, and responding to cybersecurity incidents in a regulated environment. The selected candidate will be responsible for identifying, analyzing, and mitigating security threats while ensuring compliance with established security policies, standards, and regulatory requirements.

This role requires strong technical expertise, sound judgment, and the ability to operate effectively in a structured, mission‑critical environment.

The Senior SOC Analyst will be responsible for, but not limited to, the following:

• Continuously monitor security systems, networks, and endpoints for potential threats and vulnerabilities.
• Analyze security alerts, logs, and telemetry from SIEM and endpoint protection platforms.
• Investigate and respond to security incidents, including malware infections, unauthorized access, and suspicious activities.
• Perform root cause analysis and develop remediation strategies.

• Monitor and secure identity systems, including Microsoft Active Directory and Microsoft Entra .
• Investigate identity‑based attacks, privilege escalation, and account compromise incidents.
• Support enforcement of identity and access management (IAM) policies and controls.

• Utilize Microsoft Defender tools and Microsoft Sentinel to identify advanced persistent threats and abnormal behaviors.
• Develop and refine detection rules, queries, and dashboards.
• Perform proactive threat hunting activities.

• Prepare detailed incident reports, investigation summaries, and technical documentation.
• Maintain records in accordance with organizational and regulatory requirements.
• Present findings and recommendations to technical and management stakeholders.

• Work closely with IT, infrastructure, and security teams to coordinate response efforts.
• Participate in security audits, risk assessments, and compliance reviews.
• Support continuous improvement of cybersecurity processes and controls.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
• Minimum of three (3) years of hands‑on experience with Microsoft Defender for Identity.
• Minimum of three (3) years of experience administering and securing Microsoft Active Directory environments.
• Minimum of three (3) years of experience with Microsoft Entra  (Azure Active Directory).
• Minimum of two (2) years of experience using Microsoft Sentinel or similar SIEM platforms.
• Proven experience in cybersecurity incident response and security operations.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent written and verbal communication abilities.
• Ability to work independently and manage multiple priorities in a deadline‑driven environment.

• Experience with Kusto Query Language (KQL)
• Prior experience supporting government agencies or regulated environments
• Professional certifications such as Security+, CEH, CISSP, or Azure Security Engineer
• Experience with cloud security and hybrid enterprise systems
• Familiarity with NIST, ISO 27001, or similar security frameworks

• High ethical standards and confidentiality awareness
• Strong attention to detail and documentation accuracy
• Ability to perform effectively in high‑pressure situations
• Commitment to continuous professional development
  
  Strong stakeholder and customer service orientation

• Must successfully pass required background and security screenings
• Must be available for full‑time, onsite work in Lawrenceville, Georgia
• Must comply with all organizational security and conduct policies

• This is a temporary, contract‑based engagement with an anticipated duration of approximately four months.
• Continuation is subject to project requirements and funding availability.
• Remote or hybrid work arrangements are not available for this role.