ZipRecruiter

Log In

1

Security Operations Center Analyst Jobs in Washington, DC

kgs

Security Operations Center Analyst - High

Washington, DC · On-site

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Koniag Data Solutions, LLC, a Koniag Government Services company , is seeking a Security Operations Center Analyst - High to support KDS and our government customer in Washington, DC. This position ...

kgs

Security Operations Center Analyst - High

Washington, DC · On-site

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Koniag Data Solutions, LLC, a Koniag Government Services company , is seeking a Security Operations Center Analyst - High to support KDS and our government customer in Washington, DC. This position ...

kgs

Security Operations Center Analyst - Low

Washington, DC

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Koniag Data Solutions, LLC, a Koniag Government Services company , is seeking a Security Operations Center Analyst - Low to support KDS and our government customer in Washington, DC. This position ...

kgs

Security Operations Center Analyst - Low

Washington, DC · On-site

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Koniag Data Solutions, LLC, a Koniag Government Services company , is seeking a Security Operations Center Analyst - Low to support KDS and our government customer in Washington, DC. This position ...

kgs

Security Operations Center Analyst - Mid

Washington, DC

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Koniag Data Solutions, LLC, a Koniag Government Services company , is seeking a Security Operations Center Analyst - Mid to support KDS and our government customer in Washington, DC. This position ...

next page

Showing results 1-20

All JobsSecurity Operations Center Analyst JobsSecurity Operations Center Analyst Jobs in Washington, DC

Security Operations Center Analyst information

See Washington, DC salary details

$19

$41

$80

How much do security operations center analyst jobs pay per hour?

As of Aug 14, 2026, the average hourly pay for security operations center analyst in Washington, DC is $41.74, according to ZipRecruiter salary data. Most workers in this role earn between $25.58 and $49.52 per hour, depending on experience, location, and employer.

What skills make an effective security operations center analyst?

To thrive as a Security Operations Center Analyst, you need a strong understanding of cybersecurity principles, network protocols, and incident response, often backed by a relevant degree or certifications like CompTIA Security+ or CISSP. Familiarity with SIEM tools (e.g., Splunk, QRadar), intrusion detection systems, and ticketing platforms is essential for effective monitoring and analysis. Attention to detail, analytical thinking, and clear communication help SOC Analysts excel in identifying threats and collaborating with IT teams. These skills are crucial to quickly detecting, investigating, and mitigating security incidents, protecting organizational assets from cyber threats.

What are the most common challenges security operations center analysts face during daily operations?

Security Operations Center (SOC) Analysts often deal with a high volume of alerts, many of which may be false positives, requiring keen analytical skills to prioritize genuine threats. Staying updated on evolving cyber threats and attack patterns is another challenge, as adversaries continuously adapt their tactics. Additionally, SOC Analysts frequently work in high-pressure environments where quick, accurate decision-making is crucial, and collaboration with IT, incident response teams, and management is essential to ensure coordinated defense efforts.

What is a security operations center analyst?

Security Operations Center (SOC) Analysts are cybersecurity professionals who monitor, detect, and respond to security threats within an organization’s IT environment. They analyze security alerts, investigate incidents, and coordinate responses to mitigate risks and protect sensitive data. SOC Analysts use specialized tools to track suspicious activities, implement security measures, and ensure compliance with security policies. Their work is crucial in defending organizations against cyberattacks and maintaining overall information security.

What is the difference between Security Operations Center Analyst vs Security Analyst?

AspectSecurity Operations Center AnalystSecurity Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, CISA (preferred)
Work EnvironmentMonitoring security alerts in a SOC, 24/7 shiftsAnalyzing security data, conducting risk assessments
Employer & Industry UsagePrimarily in security operations centers, cybersecurity firmsVarious industries including finance, healthcare, government

The Security Operations Center Analyst focuses on real-time monitoring and incident response within a SOC environment, often working in shifts. In contrast, a Security Analyst typically conducts broader security assessments, policy development, and risk analysis across organizations. Both roles require similar certifications and are integral to cybersecurity teams, but their daily tasks and work settings differ.

What does a security operations center analyst do?

A security operations center analyst works on the cybersecurity team at an organization to proactively defend the organization's database, website, servers, and network. In this role you control the security alerts and ensure that each alert is taken care of before the threat of hackers gaining access to your company's information is realized. You may run an investigation if you see similar threats repeatedly to see who is attempting to attack your systems and why. Your other duties may include keeping and analyzing a security log, coordinating with other analysts or security team members, and assessing company vulnerability.

More about Security Operations Center Analyst jobs

What are the most commonly searched types of Security Operations Center Analyst jobs in Washington, DC?

The most popular types of Security Operations Center Analyst jobs in Washington, DC are:

What are popular job titles related to Security Operations Center Analyst jobs in Washington, DC?

For Security Operations Center Analyst jobs in Washington, DC, the most frequently searched job titles are:

What job categories do people searching Security Operations Center Analyst jobs in Washington, DC look for?

The top searched job categories for Security Operations Center Analyst jobs in Washington, DC are:

Security Operations Center Analyst jobs near you
Infographic showing various Security Operations Center Analyst job openings in Washington, DC as of August 2026, with employment types broken down into 85% Full Time, 11% Part Time, 1% Temporary, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $86,810 per year, or $41.7 per hour.

Security Operations Center Analyst - High

Koniag, Inc.

Washington, DC • On-site

$135K - $160K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted yesterday

Job description

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Security Operations Center Analyst - High to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
Koniag Data Solutions, a Koniag Government Services company, is seeking a highly skilled and experienced Senior Security Operations Center (SOC) Analyst to support the U.S. Small Business Administration (SBA). The ideal candidate is a seasoned cybersecurity professional with extensive experience in advanced security operations, threat detection, and incident response within complex federal government IT environments. This individual will serve as a senior technical resource within SBA's SOC, providing expert-level analysis, mentorship to junior analysts, and close collaboration with the Cybersecurity Operations Technical Lead to protect SBA's enterprise IT environment from sophisticated and evolving cyber threats.
The Senior SOC Analyst will serve as an advanced-level cybersecurity operations professional within SBA's Security Operations Center, providing expert threat detection, in-depth security event analysis, and incident response leadership while mentoring junior and mid-level SOC staff and driving continuous improvement of SOC capabilities and processes.
Principal responsibilities will include but are not limited to:
  • Perform advanced, continuous monitoring and analysis of security alerts and events generated by SBA's SIEM platform, IDS/IPS systems, endpoint detection and response (EDR) tools, and other security monitoring technologies, applying expert-level analytical skills to accurately detect, classify, and prioritize security incidents and threats targeting SBA's enterprise environment.
  • Lead and conduct in-depth investigation and analysis of complex security incidents, applying advanced knowledge of threat actor TTPs, attack methodologies, and the MITRE ATT&CK framework to determine incident scope, root cause, and full impact, and driving incident response activities through to successful resolution.
  • Serve as a senior escalation point for security incidents and complex alerts escalated by junior and mid-level SOC analysts, providing expert technical guidance, mentorship, and decision support to ensure timely and effective incident triage, escalation, and response.
  • Lead and support incident response activities for significant security incidents affecting SBA's enterprise environment, coordinating containment, eradication, recovery, and post-incident review activities in accordance with SBA's incident response policies and NIST SP 800-61 guidelines, and communicating incident status and findings to the Cybersecurity Operations Technical Lead and SBA leadership.
  • Conduct advanced log analysis and correlation across diverse data sources, including Windows Event Logs, Syslog, cloud platform logs, firewall logs, web proxy logs, EDR telemetry, and application logs, to reconstruct attack timelines, identify malicious activity patterns, and develop actionable intelligence to support incident response and detection improvement activities.
  • Develop, tune, and optimize SIEM detection rules, correlation logic, alert thresholds, and dashboards to improve the accuracy and effectiveness of SBA's threat detection capabilities, reduce false positive rates, and enhance SOC analyst efficiency
  • Perform advanced threat hunting activities, proactively searching SBA's enterprise environment for hidden threats, indicators of compromise (IOCs), and adversary TTPs using the MITRE ATT&CK framework, threat intelligence feeds, and advanced analytical techniques to identify malicious activity that has evaded automated detection.
  • Analyze and operationalize threat intelligence from government and commercial sources, including US-CERT, CISA, ISACs, and commercial threat intelligence platforms, to identify relevant threats, update detection capabilities, and prioritize SOC monitoring and response activities based on current threat landscape intelligence.
  • Develop high-quality incident reports, after-action reviews (AARs), threat analysis reports, and technical documentation capturing incident timelines, root cause analysis, findings, and actionable remediation recommendations, tailored to both technical and non-technical SBA audiences.
  • Support and contribute to vulnerability management activities, providing expert analysis of vulnerability scan results, assessing real-world exploitability and risk, and advising on remediation prioritization strategies to support timely and effective vulnerability remediation across SBA's system portfolio.
  • Develop, review, and maintain SOC Standard Operating Procedures (SOPs), incident response playbooks, runbooks, and knowledge base articles, ensuring all SOC operational documentation remains current, accurate, and reflective of evolving threats and best practices.
  • Provide active mentorship, technical guidance, and on-the-job training to junior and mid-level SOC analysts, contributing to professional development, knowledge sharing, and the overall elevation of SOC team capability and performance.
  • Support the planning and execution of purple team exercises and tabletop scenarios, collaborating with the blue team and penetration testing staff to validate and improve SBA's detection and response capabilities against realistic attack scenarios.
  • Coordinate with SBA IT teams, system owners, and other cybersecurity program staff to communicate SOC findings, support remediation activities, and provide technical recommendations to enhance the overall security posture of SBA's enterprise environment.
  • Contribute to the continuous improvement of SOC processes, tools, technologies, and operational metrics, identifying opportunities to enhance detection effectiveness, response efficiency, and overall SOC performance.

Education and Experience:
Required:
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university.
  • 6+ years of progressive experience in cybersecurity operations, with at least 3 years in a senior SOC analyst, lead analyst, or equivalent advanced-level role within a SOC or cyber defense environment.
  • Demonstrated experience supporting security operations and incident response within a federal government or large enterprise IT environment.
  • One or more of the following certifications:
  • GIAC Security Operations Certified (GSOC)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Enterprise Defender (GCED)
  • GIAC Certified Intrusion Analyst (GCIA)
  • Certified SOC Analyst (CSA)
  • Certified Information Systems Security Professional (CISSP)
  • CompTIA Cybersecurity Analyst (CySA+)

Desired:
  • Master's degree in Cybersecurity, Information Assurance, or a related field.
  • 8+ years of cybersecurity operations experience, with a strong background supporting federal government or defense contracting SOC programs.
  • Prior experience supporting SBA or other federal civilian agency SOC programs.

Required Skills and Competencies:
  • Exceptional communication skills in English - both written and oral - with the ability to clearly articulate complex security findings, incident details, threat analysis results, and technical recommendations to both technical and non-technical audiences, including senior SBA leadership and government stakeholders.
  • Advanced expertise in security event monitoring, threat detection, and incident response operations within a SOC environment, with demonstrated ability to independently manage complex security incidents from initial detection through post-incident review.
  • Advanced proficiency with SIEM platforms, including Splunk, Microsoft Sentinel, ArcSight, or equivalent, with demonstrated experience developing and tuning detection rules, correlation logic, dashboards, and advanced queries to support threat detection and investigation activities.
  • Expert-level log analysis skills, with the ability to analyze and correlate security-relevant data across diverse log sources, including Windows Event Logs, Syslog, cloud platform logs, network device logs, and application logs, to reconstruct attack timelines and identify malicious activity.
  • Advanced knowledge of network security concepts and protocols, including TCP/IP, DNS, HTTP/S, and demonstrated ability to analyze network traffic and packet captures using tools such as Wireshark, Zeek, or equivalent to support incident investigation and threat hunting activities.
  • Deep proficiency with endpoint detection and response (EDR) platforms, with demonstrated ability to leverage EDR telemetry for advanced threat detection, incident investigation, and threat hunting activities across Windows and Linux endpoint environments.
  • Demonstrated expertise in applying the MITRE ATT&CK framework to threat detection, threat hunting, incident analysis, and detection engineering activities, with the ability to map observed adversary behaviors to ATT&CK techniques and inform detection improvement efforts.
  • Strong experience operationalizing threat intelligence from multiple government and commercial sources to enhance SOC detection capabilities, prioritize monitoring activities, and support incident response efforts.
  • Experience developing high-quality incident reports, after-action reviews, SOC operational reports, and technical briefings, with the ability to communicate complex findings and recommendations clearly and effectively.
  • Demonstrated ability to mentor and provide technical guidance to junior and mid-level SOC analysts, contributing to team capability development and knowledge sharing within a SOC environment.
  • Knowledge of federal cybersecurity frameworks and compliance requirements, including NIST SP 800-53, NIST SP 800-61, FISMA, and applicable CISA guidance, and their implications for SOC operations within a federal civilian agency environment.
  • Ability to obtain and maintain a Public Trust Clearance.

Desired Skills and Competencies:
  • Prior experience supporting SBA or other federal civilian agency SOC programs, with demonstrated knowledge of SBA's mission, IT environment, and cybersecurity monitoring and response requirements.
  • Advanced experience with cloud security monitoring and operations in AWS, Azure, or GCP environments, including deep familiarity with cloud-native security tools, logging capabilities, and threat detection methodologies for cloud-hosted workloads and services.
  • Experience with Security Orchestration, Automation, and Response (SOAR) platforms and proficiency in scripting languages such as Python, PowerShell, or Bash to develop automated detection, triage, and response workflows that enhance SOC efficiency and effectiveness.
  • Experience conducting digital forensics and malware analysis activities to support incident response investigations, including memory forensics, disk forensics, and basic static and dynamic malware analysis techniques
  • Knowledge of Zero Trust Architecture (ZTA) principles and their implications for SOC monitoring strategies, detection engineering, and incident response within a federal IT environment.
  • Familiarity with the CDM (Continuous Diagnostics and Mitigation) program tools, data requirements, and their application in supporting continuous monitoring and threat detection activities within federal civilian agency SOC environments.
  • Experience with deception technologies, including honeypots and deception platforms, and their application in enhancing SOC threat detection capabilities and supporting adversary attribution efforts.
  • Experience supporting or leading purple team exercises and collaborative red team/blue team activities to validate and improve detection and response capabilities against realistic adversary TTPs.
  • GIAC Certified Forensic Analyst (GCFA) or GIAC Network Forensic Analyst (GNFA) certification.
  • Experience supporting FedRAMP authorized cloud environments and familiarity with FedRAMP continuous monitoring requirements and their implications for SOC monitoring and incident response activities.
  • Familiarity with threat intelligence platforms (TIPs) such as MISP, ThreatConnect, or Anomali, and experience with structured threat intelligence formats including STIX/TAXII for consuming and sharing threat intelligence within a SOC environment.

Our Equal Employment Opportunity Policy
The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional
Koniag logo

About Koniag

Sourced by ZipRecruiter

Industry

Investment management and consulting services

Company size

501 - 1,000 Employees

Headquarters location

Kodiak, AK, US

Year founded

1972

Social media

Facebook

View All Koniag Jobs

Apply