ZipRecruiter

Log In

1

Security Operations Center Analyst Jobs in Reston, VA

ECS

Security Operations Center Analyst

Falls Church, VA · On-site

Everforth ECS is seeking a Security Operations Center Analyst to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax . Please Note: This position is contingent upon ...

next page

Showing results 1-20

All JobsSecurity Operations Center Analyst JobsSecurity Operations Center Analyst Jobs in Reston, VA

Security Operations Center Analyst information

See Reston, VA salary details

$18

$38

$73

How much do security operations center analyst jobs pay per hour?

As of Jul 7, 2026, the average hourly pay for security operations center analyst in Reston, VA is $38.35, according to ZipRecruiter salary data. Most workers in this role earn between $23.51 and $45.53 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Security Operations Center Analyst, and why are they important?

To thrive as a Security Operations Center Analyst, you need a strong understanding of cybersecurity principles, network protocols, and incident response, often backed by a relevant degree or certifications like CompTIA Security+ or CISSP. Familiarity with SIEM tools (e.g., Splunk, QRadar), intrusion detection systems, and ticketing platforms is essential for effective monitoring and analysis. Attention to detail, analytical thinking, and clear communication help SOC Analysts excel in identifying threats and collaborating with IT teams. These skills are crucial to quickly detecting, investigating, and mitigating security incidents, protecting organizational assets from cyber threats.

How much is a SOC analyst paid?

A Security Operations Center (SOC) analyst's salary varies based on experience, location, and certifications, but typically ranges from $60,000 to $100,000 annually in the United States. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CEH can earn higher salaries, especially in high-demand areas or with specialized skills in security tools and incident response.

What are the most common challenges Security Operations Center Analysts face during daily operations?

Security Operations Center (SOC) Analysts often deal with a high volume of alerts, many of which may be false positives, requiring keen analytical skills to prioritize genuine threats. Staying updated on evolving cyber threats and attack patterns is another challenge, as adversaries continuously adapt their tactics. Additionally, SOC Analysts frequently work in high-pressure environments where quick, accurate decision-making is crucial, and collaboration with IT, incident response teams, and management is essential to ensure coordinated defense efforts.

What are Security Operations Center (SOC) Analysts?

Security Operations Center (SOC) Analysts are cybersecurity professionals who monitor, detect, and respond to security threats within an organization’s IT environment. They analyze security alerts, investigate incidents, and coordinate responses to mitigate risks and protect sensitive data. SOC Analysts use specialized tools to track suspicious activities, implement security measures, and ensure compliance with security policies. Their work is crucial in defending organizations against cyberattacks and maintaining overall information security.

What does a security operations center analyst do?

A Security Operations Center (SOC) analyst monitors and analyzes security alerts and incidents to protect an organization’s information systems. They use tools like SIEM systems, investigate potential threats, and respond to security breaches to prevent or minimize damage. Strong analytical skills, knowledge of cybersecurity threats, and relevant certifications are often required for this role.

Is SOC analyst still in demand?

Yes, Security Operations Center (SOC) analysts are in high demand due to increasing cyber threats and the need for organizations to monitor and respond to security incidents. The role requires skills in threat detection, incident response, and familiarity with security tools like SIEM systems, and job growth is expected to remain strong in the cybersecurity field.

What is the difference between Security Operations Center Analyst vs Security Analyst?

AspectSecurity Operations Center AnalystSecurity Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, CISA (preferred)
Work EnvironmentMonitoring security alerts in a SOC, 24/7 shiftsAnalyzing security data, conducting risk assessments
Employer & Industry UsagePrimarily in security operations centers, cybersecurity firmsVarious industries including finance, healthcare, government

The Security Operations Center Analyst focuses on real-time monitoring and incident response within a SOC environment, often working in shifts. In contrast, a Security Analyst typically conducts broader security assessments, policy development, and risk analysis across organizations. Both roles require similar certifications and are integral to cybersecurity teams, but their daily tasks and work settings differ.

What Does a Security Operations Center Analyst Do?

A security operations center analyst works on the cybersecurity team at an organization to proactively defend the organization's database, website, servers, and network. In this role you control the security alerts and ensure that each alert is taken care of before the threat of hackers gaining access to your company's information is realized. You may run an investigation if you see similar threats repeatedly to see who is attempting to attack your systems and why. Your other duties may include keeping and analyzing a security log, coordinating with other analysts or security team members, and assessing company vulnerability.

Do SOC analysts get paid well?

Security Operations Center (SOC) analysts typically earn competitive salaries that vary based on experience, certifications, and location. Entry-level analysts may start with lower pay, but experienced professionals with certifications like CISSP or CEH can command higher salaries, especially in organizations with 24/7 security monitoring environments.
More about Security Operations Center Analyst jobs
What are popular job titles related to Security Operations Center Analyst jobs in Reston, VA? For Security Operations Center Analyst jobs in Reston, VA, the most frequently searched job titles are:
What job categories do people searching Security Operations Center Analyst jobs in Reston, VA look for? The top searched job categories for Security Operations Center Analyst jobs in Reston, VA are:
What cities near Reston, VA are hiring for Security Operations Center Analyst jobs? Cities near Reston, VA with the most Security Operations Center Analyst job openings:
Security Operations Center Analyst jobs near you
Infographic showing various Security Operations Center Analyst job openings in Reston, VA as of July 2026, with employment types broken down into 1% Locum Tenens, 1% Internship, 86% Full Time, 6% Part Time, 1% Temporary, and 5% Contract. Highlights an 82% Physical, 5% Hybrid, and 13% Remote job distribution, with an average salary of $79,770 per year, or $38.4 per hour.
Security Operations Center Analyst

Security Operations Center Analyst

ECS

Falls Church, VA • On-site

Full-time

Posted 8 days ago

Job description

Everforth ECS is seeking a Security Operations Center Analyst to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax. Please Note: This position is contingent upon contract award.
The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP separates business and financial data from operational warfighting data, aiming to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.
The Security Operations Center Analyst supports WDP's 24/7 continuous monitoring mission by performing structured threat detection, incident investigation, and response operations across NIPRNet, SIPRNet, and JWICS. This role operates within an integrated SOC environment leveraging Splunk SIEM, SOAR-driven automation, and AI-assisted triage capabilities to identify adversary behavior, contain incidents, and sustain cyber defense resilience across WDP's classified and unclassified mission enclaves.
• Executes continuous security monitoring operations across classified and unclassified DoW networks, supporting mission systems operating on NIPRNet, SIPRNet, and JWICS.
• Analyzes security events generated by enterprise Security Information and Event Management platforms including Splunk and Elastic, correlating host, network, and application telemetry to identify anomalous activity and potential adversary behavior.
• Conducts structured incident investigations using established incident response playbooks aligned to DoW Cyber Incident Handling Program guidance, documenting findings within ServiceNow and SharePoint tracking repositories.
• Performs proactive threat hunting activities leveraging MITRE ATT&CK mappings, endpoint telemetry, network flow data, and log analytics to detect previously unidentified threats.
• Coordinates containment and remediation actions with system administrators, ISSOs, and vulnerability management teams, supporting rapid mitigation of malware, unauthorized access, and policy violations.
• Maintains detailed incident records, forensic timelines, and evidentiary artifacts supporting after-action reporting and continuous monitoring requirements under the Risk Management Framework.
• Tunes detection logic, refines correlation rules, and contributes to improvement of SOC use cases to reduce false positives and increase detection fidelity.
• Provides technical mentorship to junior analysts through peer review of investigations and collaborative shift handovers.
• Delivers operational reporting products including incident summaries, alert trend analysis, and threat activity assessments supporting operational readiness, cyber defense resilience, and mission assurance across combat support and intelligence environments.
• Performs other duties as assigned.
• Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance.
• A minimum of 3 years of experience in security operations, cyber threat analysis, or incident response within a federal, defense, or intelligence community environment, with demonstrated hands-on proficiency performing continuous monitoring and structured incident investigations using enterprise SIEM platforms such as Splunk or Elastic across multi-enclave network environments.
• Active IAM Level I certification, satisfied by one of the following: CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Apply