Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
Job Summary
JCS Solutions is seeking a Security Operations Center (SOC) Analyst supporting the Pentagon Reservation under the DISA Penetration Handling, Incident, System Health (PHISH) Support Services II program. This position supports a 24/7 SOC mission and requires availability for rotating shifts, including weekends, holidays, and inclement-weather operations. The position requires 60 percent onsite work at the Mark Center in Alexandria, Virginia, consistent with program and customer requirements.
The Security Operations Center (SOC) Analyst supports continuous monitoring, detection, analysis, escalation, mitigation, and response to cybersecurity events affecting customer networks, endpoints, servers, applications, cloud environments, and mission systems. The analyst uses security telemetry, threat intelligence, established analytic procedures, and operational tools to identify suspicious or malicious activity; investigate potential compromises; document findings; and coordinate response actions with senior analysts, incident responders, cyber engineers, system owners, and mission partners.
This role is an experienced technical individual-contributor position. The SOC Analyst works independently to achieve day-to-day operational objectives and may own defined projects or technical processes within the SOC. The analyst contributes to operational cybersecurity, infrastructure support, and mission-support activities; collaborates with internal subject-matter experts to resolve technical problems; and may provide peer support, coaching, or technical review for less-experienced personnel.
Location: Alexandria, VA
Clearance: TS/SCI
Certification: Active DoD 8140/8570 IAT Level II certification
What’s in it for you: Join a premier technology firm specializing in innovative solutions.
Be part of a collaborative, inclusive, and innovative work culture.
Enjoy tremendous growth potential in a high-performing team environment.
A robust benefits package: Health, dental, and vision insurance
Life insurance
Short-and-long term disability
Paid time off (PTO)
401k retirement plan with employer match
Annual Professional Development Reimbursement Program
And more!
What you will do: Monitor, triage, and investigate alerts from Security Information and Event Management (SIEM) platforms, Endpoint Detection and Response (EDR) tools, intrusion detection and prevention systems (IDS/IPS), authentication logs, NetFlow, packet capture, cloud-security tools, vulnerability data, and other available security sensors.
Analyze endpoint, host, network, identity, application, and cloud telemetry to identify anomalous, suspicious, or malicious activity.
Conduct assigned incident investigations by reviewing security logs and alerts, correlating evidence across available data sources, identifying potentially affected systems or accounts, assessing scope and potential impact, and escalating cases in accordance with established procedures.
Apply cyber threat intelligence and knowledge of adversary tactics, techniques, and procedures (TTPs) to validate alerts, identify indicators of compromise, prioritize investigations, and provide relevant context to incident responders and technical stakeholders.
Support approved containment, eradication, recovery, and post-incident activities by collecting evidence, documenting actions, validating security controls, and coordinating with designated response personnel.
Perform computer forensic network and host analysis in support of incident investigations, threat-hunting activities, and evidence-based reporting.
Support proactive threat hunts, environment sweeps, and detection-validation activities based on known or emerging adversary activity, vulnerabilities, and organizational priorities.
Identify recurring false positives, control gaps, telemetry limitations, suspicious trends, vulnerabilities, and adversary…