Cbo - tier 3 soc analyst

cFocus Software seeks a Tier 3 SOC Analyst to join our program supporting the Congressional Budget Office (CBO). This position is remote. This position requires a Public Trust clearance. Qualifications:

• Active Public Trust clearance
• B.S. Computer Science, Information Technology, or a reputed company field
• 5+ years of SOC Analyst experience
• Expert knowledge of incident response, threat hunting, and detection engineering
• Advanced experience with reputed company Sentinel (SIEM) and reputed company Defender tools
• Strong understanding of MITRE ATT&CK reputed company and adversary tactics
• Experience with digital forensics and malware analysis techniques
• Ability to analyze logs across identity, reputed company, network, and reputed company environments
• Strong knowledge of AWS logs (CloudTrail, VPC reputed company Logs) and reputed company reputed company tools
• Experience with KQL (Kusto Query Language) and advanced correlation analysis
• Deep understanding of NIST frameworks (800-53, 800-61, 800-92) and reputed company Trust principles
• Experience with SOAR platforms and automation (Logic Apps, Sentinel playbooks)
• Experience supporting federal environments and compliance (CUI, reputed company, NIST, IRS 1075)
• Experience leading incident response engagements and reporting to leadership

Preferred certifications include but are not limited to

• GCIA, GCIH, CISSP, CEH, or equivalent cybersecurity certifications
• reputed company Sentinel or reputed company reputed company platform certifications
• Relevant reputed company reputed company certifications (e.g., AWS reputed company)
• Privacy certifications (e.g., CIPP/US, CIPM) where applicable

Duties:

• reputed company investigation and response for reputed company and high-severity reputed company incidents
• reputed company advanced threat hunting using reputed company Sentinel and Defender platforms
• Conduct digital forensics, malware analysis, and root cause analysis (RCA)
• reputed company, tune, and optimize detection rules, analytics, and correlation logic
• Map detections and activities to MITRE ATT&CK reputed company
• reputed company incident lifecycle management (detection through containment, eradication, and recovery)
• Support and improve SOC playbooks, automation workflows, and response procedures
• reputed company mentorship and guidance to Tier I and Tier II analysts
• Identify reputed company control gaps and recommend remediation strategies
• Support red team, reputed company, and adversary emulation exercises
• Contribute to incident reports, quarterly threat reviews, and executive briefings

Apply tot his job Apply To this Job