ZipRecruiter

Log In

1

Security Operations Analyst Soc Jobs in Virginia

Mantis Security Corporation

SOC Analyst

Reston, VA · On-site

Mantis Security is seeking an experienced Security Operations Center (SOC) Analyst to support the monitoring, detection, investigation, and response to cybersecurity threats within a mission-focused ...

Mantis Security Corporation

SOC Analyst

Herndon, VA · On-site

Mantis Security is seeking an experienced Security Operations Center (SOC) Analyst to support the monitoring, detection, investigation, and response to cybersecurity threats within a mission-focused ...

Mantis Security Corporation

SOC Analyst

Reston, VA · On-site

$125 - $150/hr

Mantis Security is seeking an experienced Security Operations Center (SOC) Analyst to support the monitoring, detection, investigation, and response to cybersecurity threats within a mission-focused ...

Mantis Security Corporation

SOC Analyst

Herndon, VA · On-site

Mantis Security is seeking an experienced Security Operations Center (SOC) Analyst to support the monitoring, detection, investigation, and response to cybersecurity threats within a mission-focused ...

Allied Universal

SOC Security Analyst

Ashburn, VA · On-site

$23.18/hr

The SOC (Security Operations Center) Security Analyst will be assigned to furthering the security mission within the client's Regional Security Operations Center (RSOC) and Global Security Operations ...

previous pagenext page

Showing results 21-40

All JobsSecurity Operations Analyst Soc JobsSecurity Operations Analyst Soc Jobs in Virginia

Security Operations Analyst Soc information

What is a security operations analyst SOC?

A Security Operations Analyst (SOC) is a cybersecurity professional responsible for monitoring, detecting, and responding to security threats within an organization's IT environment. Working in a Security Operations Center (SOC), these analysts use a variety of tools and technologies to analyze security incidents, investigate alerts, and support incident response efforts. Their primary goal is to protect the organization's data and systems from cyberattacks by identifying vulnerabilities and mitigating risks. The role often involves collaborating with other IT and security teams to develop and implement effective security measures.

What are some typical challenges faced by a security operations analyst SOC and how can they be managed effectively?

Security Operations Analysts in a SOC often face challenges such as managing high volumes of security alerts, distinguishing between real threats and false positives, and staying updated with evolving cyber threats. Working in a fast-paced environment, analysts must prioritize incidents based on risk and impact, often collaborating closely with IT and incident response teams. Effective time management, continual training, and leveraging automation tools can help manage these challenges and support ongoing professional growth within the field.

What are the key skills and qualifications needed to thrive as a security operations analyst SOC, and why are they important?

To thrive as a Security Operations Analyst (SOC), you need strong analytical skills, a solid understanding of cybersecurity principles, and a relevant degree or certifications such as CompTIA Security+ or CISSP. Proficiency with SIEM tools like Splunk, intrusion detection systems, and network monitoring platforms is typically required. Attention to detail, problem-solving abilities, and effective communication help analysts quickly identify and respond to security incidents. These skills and qualities are essential for protecting organizational assets and ensuring rapid, coordinated responses to threats in a high-pressure environment.

What is the difference between Security Operations Analyst Soc vs Security Analyst?

AspectSecurity Operations Analyst SocSecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity operations centers, 24/7 monitoringOffice or remote, project-based
Employer & IndustryCybersecurity firms, large corporations, government agenciesVarious industries including finance, healthcare, tech

The main difference is that Security Operations Analysts Soc focus on real-time security monitoring, incident response, and managing security tools within a Security Operations Center. Security Analysts may have a broader role, including vulnerability assessments, security audits, and policy development. Both roles require similar certifications and often overlap in skills, but the Soc role is more centered on operational security and incident handling in a dedicated environment.

What cities in Virginia are hiring for Security Operations Analyst Soc jobs?

Cities in Virginia with the most Security Operations Analyst Soc job openings:

Infographic showing various Security Operations Analyst Soc job openings in Virginia as of June 2026, with employment types broken down into 2% As Needed, 73% Full Time, 7% Part Time, 2% Temporary, 14% Contract, and 2% Nights. Highlights an 86% Physical, 4% Hybrid, and 10% Remote job distribution.

Tier 2 Security Operations Center (SOC) Analyst

Alexandria, VA • On-site

Leidos
IT Services • 10K+ employees
Learn more about Leidosexternal

Full-time

Posted 7 days ago

Leidos rating

8.3

Company rating: 8.3 out of 10

Based on 153 frontline employees who took The Breakroom Quiz

81st of 500 rated business services

Job description

Leidos is seeking an experienced Tier 2 Security Operations Center (SOC) Analyst to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC.
The Tier 2 SOC Analyst will perform advanced analysis of cybersecurity events escalated from Tier 1 or identified through enterprise monitoring capabilities. This position will correlate security data, determine the scope and potential impact of suspicious activity, support incident triage and containment, preserve evidence, and coordinate with incident responders and other cybersecurity teams to protect DHRA systems and networks.
Work Locations:
  • Mark Center, Alexandria, Virginia - 3 positions

  • Department of Defense Center - Monterey Bay, Seaside, California - 3 positions

Clearance: Active Secret security clearance required at time of consideration. U.S. Citizen is a must.
Mission Environment
DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense's largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). The Tier 2 SOC Analysts operate within a 24x7 security operations environment responsible for detecting, analyzing, escalating, and supporting response to cybersecurity activity affecting DHRA systems and networks. Tier 2 analysts provide the deeper technical analysis required when events cannot be resolved through initial Tier 1 triage.
Primary Responsibilities:
  • Perform advanced analysis of cybersecurity events escalated from Tier 1 analysts or identified through endpoint, user-activity, network, and other enterprise monitoring capabilities.

  • Correlate alerts, security telemetry, and supporting technical data to determine the nature, scope, severity, and potential impact of cybersecurity activity.

  • Distinguish legitimate activity, false positives, policy violations, suspicious behavior, and potential cybersecurity incidents.

  • Determine appropriate next actions based on approved SOC procedures, playbooks, and escalation criteria.

  • Recommend or initiate authorized actions to contain or mitigate identified threats.

  • Support cybersecurity incident triage, escalation, and containment in coordination with the incident-response team.

  • Preserve relevant technical evidence and supporting information required for further investigation and incident response.

  • Document investigative actions, analysis, findings, and conclusions in Government-approved systems.

  • Maintain complete and accurate event records, tickets, timelines, and supporting evidence.

  • Contribute to required SOC event reporting and operational status information.

  • Perform Tier 2 troubleshooting of cybersecurity tools, alerts, security data, and related technical issues.

  • Use approved Commercial-Off-The-Shelf (COTS) security-analysis tools to investigate cybersecurity events.

  • Support security testing, mitigation activities, and cybersecurity compliance checking as required by SOC operations.

  • Coordinate analysis with incident responders, network engineers, endpoint-security personnel, cybersecurity-tool teams, system administrators, and other cybersecurity stakeholders.

  • Identify recurring false positives, detection gaps, or ineffective alerting and recommend improvements to monitoring and detection capabilities.

  • Support tuning of cybersecurity monitoring capabilities to improve detection accuracy and analyst effectiveness.

  • Contribute to SOC procedure, playbook, and process improvements based on operational experience and lessons learned.

  • Support knowledge transfer across SOC analysts to improve consistent analysis and response within the 24x7 operating environment.

Basic Qualifications:
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 5 or more years of relevant cybersecurity experience. Specific experience, education and training may be considered in lieu of degree.

  • Experience performing cybersecurity event analysis, SOC operations, cyber defense, incident triage, or security monitoring.

  • Experience analyzing and correlating alerts from multiple cybersecurity monitoring capabilities.

  • Experience investigating endpoint, network, user-activity, or other cybersecurity events.

  • Experience determining the scope, severity, and potential impact of suspicious cybersecurity activity.

  • Experience supporting cybersecurity incident escalation, containment, mitigation, or evidence preservation.

  • Experience using enterprise security-analysis or cybersecurity monitoring tools.

  • Experience performing Tier 2 cybersecurity troubleshooting.

  • Working knowledge of cybersecurity attack techniques, network-security concepts, endpoint security, event analysis, and incident-response processes.

  • Ability to document investigations, findings, actions, and conclusions clearly and accurately.

  • Ability to work effectively within a team-based 24x7 security operations environment.

  • U.S. Citizenship required.

  • Active Secret security clearance required.

Preferred Qualifications:
  • Experience supporting a Department of Defense or Federal Security Operations Center.

  • Experience working in a 24x7 SOC or Cybersecurity Service Provider environment.

  • Experience with Security Information and Event Management (SIEM) platforms and enterprise cybersecurity monitoring tools.

  • Experience analyzing endpoint, network, identity, user-activity, intrusion-detection, or other cybersecurity telemetry.

  • Experience supporting cybersecurity incident response and digital-evidence preservation.

  • Experience tuning security alerts, detection logic, or monitoring capabilities to reduce false positives and improve detection quality.

  • Experience developing or refining SOC procedures, playbooks, or escalation criteria.

  • Experience with cybersecurity mitigation, compliance checking, or security testing.

  • Familiarity with Department of Defense cybersecurity requirements and Risk Management Framework processes.

  • Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting:
September 2, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:
Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

What Leidos employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Leidos logo

About Leidos

Sourced by ZipRecruiter

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainable practices. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community.

Industry

It services

Company size

10,000+ Employees

Headquarters location

Reston, VA, US

Social media

FacebookTwitter

View All Leidos Jobs

Apply