Tier II Security Operations Center (SOC) Analyst

Technology Shared Services (TSS) is looking for a Tier II Security Operations Center (SOC) Analyst. As a core member of our 24x7x365 TSS Evolved SOC team, the Cyber Security Analyst (Tier II) will be responsible for deep-dive investigation, advanced incident response, and proactive threat hunting.

Operating within an Evolved SOC paradigm, you will leverage automation, machine learning, and artificial intelligence (AI) to accelerate detection and response times. The ideal candidate possesses strong analytical skills and the ability to pivot seamlessly between traditional analysis and AI-driven security orchestration tools to defend our client environments.

RESPONSIBILITIES

As a Tier II Security Operations Center Analyst, you will:

• Advanced Incident Response: Conduct deep-dive analysis, containment, and remediation of escalated security events and complex cyberattacks.
• AI & Automation Integration: Utilize and tune AI-driven security tools, Machine Learning (ML) models, and SOAR (Security Orchestration, Automation, and Response) playbooks to streamline alert triaging and reduce false positives.
• Proactive Threat Hunting: Design and execute threat-hunting hypotheses across network, host, and cloud environments to uncover sophisticated threats that bypass traditional defenses.
• Analytical Log Correlation: Analyze and correlate complex datasets from SIEM, EDR, XDR, and cloud environments to reconstruct attack chains and identify root causes.
• Threat Intelligence Utilization: Operationalize tactical threat intelligence to proactively block emerging threats and update detection signatures.
• Continuous Improvement: Collaborate with Tier III analysts and engineers to refine detection rules, automate repetitive tasks, and improve overall SOC efficiency.
• Mentorship: Assist in the professional development of Tier I analysts by providing technical guidance and reviewing escalated tickets.

REQUIRED QUALIFICATIONS

You MUST have:

• Technical Training, Certification(s) or Degree in Cybersecurity, Computer Science, or equivalent technical work experience
• 3 or more years of demonstrated experience in a SOC or dedicated incident response role
• CompTIA Security+ certification (or equivalent DoD-approved baseline certification) required for Tier 2 SOC Analyst duties
• Proven ability to analyze complex data sets, recognize anomalous patterns, and deduce attacker intentD
• Demonstrated experience utilizing AI-powered cybersecurity platforms (e.g., Copilot for Security, AI-driven EDR/XDR) or leveraging LLMs for log analysis and script generation.
• Demonstrated experience utilizing of the MITRE ATT&CK framework, the OSI model, TCP/IP protocols, and cloud security architectures (AWS, Azure, or GCP).
• Advanced hands-on experience with SIEM and security technologies, including Splunk, Microsoft Defender EDR/XDR, Microsoft Intune and Entra ID, Palo Alto Networks, and enterprise log aggregation and analysis platforms.
• Working knowledge of NIST, FISMA, FedRAMP, and DoD cybersecurity policies and frameworks, with the ability to apply applicable security controls, procedures, and requirements to day-to-day SOC operations.
• Must be able to pass a full background check 6C to obtain the required determination for a position of Public Trust.
• Must be a US Citizen

Work Environment:

• Louisina residency; living within a reasonable commutable distance (~approximately 60 miles or less) of the Bossier City, LA facility

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
��

● Growth: AI-powered career tool that identifies career steps and learning opportunities
● Support: An internal mobility team focused on helping you achieve your career goals
● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
● Flexibility: Full-flex work week to own your priorities at work and at home
● Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.