ZipRecruiter

Log In

1

Security Operations Center Soc Analyst Jobs (NOW HIRING)

Northern Technologies Group

SOC Analyst

Alexandria, VA · On-site

$150K - $165K/yr

Position Summary Northern Technologies Group (NTG) is seeking a highly motivated Security Operations Center (SOC) Analyst to support a mission-critical cybersecurity operations environment. The SOC ...

next page

Showing results 1-20

All JobsSecurity Operations Center Soc Analyst Jobs

Security Operations Center Soc Analyst information

See salary details

$17

$36

$70

How much do security operations center soc analyst jobs pay per hour?

As of Jul 23, 2026, the average hourly pay for security operations center soc analyst in the United States is $36.86, according to ZipRecruiter salary data. Most workers in this role earn between $22.60 and $43.75 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Security Operations Center (SOC) Analyst, and why are they important?

To thrive as a Security Operations Center (SOC) Analyst, you need a solid understanding of cybersecurity principles, network protocols, and incident response, often supported by a degree in information security or related certifications like CompTIA Security+ or CISSP. Familiarity with Security Information and Event Management (SIEM) tools, intrusion detection systems, and log analysis platforms is typically required. Strong analytical thinking, attention to detail, and effective communication skills help SOC Analysts quickly identify threats and coordinate responses. These competencies are crucial for maintaining an organization’s security posture and minimizing the impact of cyber incidents.

What is a Security Operations Center (SOC) Analyst?

A Security Operations Center (SOC) Analyst is a cybersecurity professional responsible for monitoring, detecting, and responding to security incidents within an organization's IT environment. SOC Analysts use specialized tools and techniques to analyze security alerts, investigate threats, and coordinate incident responses to protect sensitive data and systems. They play a critical role in maintaining an organization's overall security posture by proactively identifying vulnerabilities and ensuring compliance with security policies. SOC Analysts often work in shifts to provide 24/7 security monitoring. Their work helps organizations defend against cyberattacks, breaches, and other security threats.

What is the difference between Security Operations Center Soc Analyst vs Security Engineer?

AspectSecurity Operations Center Soc AnalystSecurity Engineer
CertificationsCompTIA Security+, CEH, CISSP (preferred)CISSP, GIAC, Security+ (common)
Work EnvironmentMonitoring security alerts in a SOC, incident responseDesigning and implementing security solutions
Employer & Industry UsageTypically employed by organizations with SOCs, cybersecurity firmsUsed across industries for security infrastructure development

The Security Operations Center Soc Analyst primarily monitors security alerts and responds to incidents within a SOC environment, focusing on detection and immediate response. In contrast, a Security Engineer designs, implements, and maintains security systems. While both roles require similar certifications and work in cybersecurity, their daily tasks and focus areas differ significantly.

What are some common challenges faced by Security Operations Center (SOC) Analysts, and how can they prepare to address them?

SOC Analysts often face the challenge of managing large volumes of alerts and distinguishing genuine threats from false positives. They must stay updated on the latest security threats and tools to respond effectively. Collaboration with IT and other security teams is crucial for thorough incident investigation and resolution. To prepare, analysts should continuously develop their technical skills, familiarize themselves with the organization's security environment, and practice effective communication for coordinated responses.
More about Security Operations Center Soc Analyst jobs
What cities are hiring for Security Operations Center Soc Analyst jobs? Cities with the most Security Operations Center Soc Analyst job openings:
What states have the most Security Operations Center Soc Analyst jobs? States with the most job openings for Security Operations Center Soc Analyst jobs include:
What job categories do people searching Security Operations Center Soc Analyst jobs look for? The top searched job categories for Security Operations Center Soc Analyst jobs are:
What are popular job titles related to Security Operations Center Soc Analyst jobs? For Security Operations Center Soc Analyst jobs, the most frequently searched job titles are:
Security Operations Center Soc Analyst jobs near you
Infographic showing various Security Operations Center Soc Analyst job openings in the United States as of July 2026, with employment types broken down into 1% Locum Tenens, 88% Full Time, 6% Part Time, 1% Temporary, and 4% Contract. Highlights an 83% Physical, 7% Hybrid, and 10% Remote job distribution, with an average salary of $76,675 per year, or $36.9 per hour.

SOC Analyst

Northern Technologies Group

Alexandria, VA • On-site

$150K - $165K/yr

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

Description:


Position Summary

Northern Technologies Group (NTG) is seeking a highly motivated Security Operations Center (SOC) Analyst to support a mission-critical cybersecurity operations environment. The SOC Analyst will be responsible for monitoring, analyzing, investigating, and responding to cybersecurity events and incidents across enterprise networks and systems. This role requires experience in incident response, cyber defense operations, threat detection, and security monitoring within a Security Operations Center (SOC).


The ideal candidate will possess strong analytical skills, experience working with enterprise security tools, and a deep understanding of cyber threat actor tactics, techniques, and procedures (TTPs).


Essential Duties and Responsibilities
  • Monitor and analyze security alerts generated from endpoints, IDS/IPS systems, NetFlow data, SIEM platforms, EDR solutions, and other enterprise security monitoring tools.
  • Identify, investigate, and respond to cybersecurity incidents and suspected system compromises across customer networks, endpoints, cloud environments, and enterprise infrastructure.
  • Perform detailed analysis of large-scale log data and correlate information from multiple security sources to determine attack scope, root cause, and operational impact.
  • Conduct complex investigations involving malware, phishing, insider threats, credential compromise, lateral movement, persistence mechanisms, and other advanced cyber threats.
  • Independently investigate novel or complex cybersecurity incidents that fall outside established playbooks by applying sound technical judgment and analytical problem-solving.
  • Recommend appropriate containment, eradication, recovery, and post-incident response actions for suspected or confirmed compromised systems based on investigative findings and operational risk.
  • Escalate validated threats and incidents to senior SOC personnel while providing comprehensive technical analysis, supporting evidence, and recommended courses of action.
  • Document investigative findings, response actions, root cause analyses, and recommendations within case management and knowledge management systems.
  • Create, maintain, and distribute incident reports, after-action reports, and executive summaries to customers, stakeholders, and leadership.
  • Support Cyber Network Defense (CND) operations through protection, detection, response, threat hunting, and sustainment activities.
  • Develop, update, and improve incident response playbooks, standard operating procedures (SOPs), and investigative workflows based on lessons learned, emerging threats, and evolving adversary tactics.
  • Contribute to the development and tuning of detection logic, SIEM correlation rules, and response procedures to improve SOC effectiveness and reduce false positives.
  • Maintain awareness of emerging cyber threats, attack vectors, adversary tactics, techniques, and procedures (TTPs), and apply threat intelligence to ongoing investigations.
  • Participate in shift operations supporting a 24x7 mission-essential environment.
  • Contribute to knowledge sharing, mentoring, analyst training, and continuous improvement initiatives to strengthen SOC capabilities and operational readiness.
Minimum Qualifications (Knowledge, Skills, and Abilities)
  • Must be a U.S. Citizen.
  • Must possess an active DoD Top Secret/SCI security clearance.
  • Bachelor's degree and 8+ years of relevant experience. Additional military service and relevant experience may substitute for degree requirements. Candidates without a degree must possess a minimum of 12 years of relevant experience.
  • Minimum 2 years of incident handling and incident response experience.
  • Minimum 2 years of Security Operations Center (SOC) experience.
  • Experience supporting Cyber Network Defense (CND) operations within a Computer Incident Response organization.
  • Demonstrated understanding of cyber threat lifecycles, attack vectors and exploitation methodologies, and adversary tactics, techniques, and procedures (TTPs).
  • Strong knowledge of TCP/IP networking, network protocols and ports, traffic analysis, system administration, OSI model, and defense-in-depth security principles.
  • Ability to work independently in a fast-paced operational environment.
  • Demonstrated ability to independently investigate complex or previously unseen cybersecurity incidents by applying analytical problem-solving beyond established playbooks and standard operating procedures.
  • Experience developing, updating, or improving incident response playbooks, standard operating procedures (SOPs), detection use cases, or investigative workflows, with the ability to recommend appropriate containment, eradication, and recovery actions for suspected compromised systems.
  • Ability to articulate a structured incident investigation methodology, including alert triage, evidence collection, attack scoping, containment, eradication, recovery, and post-incident analysis.
  • DoD 8570 IAT Level II (or higher) certification prior to start date (CompTIA Security+, SSCP, etc.).
  • Must obtain a DoD 8570 CSSP-Analyst certification within six months of hire (e.g., CEH, CySA+, GCIA).
Preferred Qualifications
  • Experience analyzing large volumes of: Security logs, NetFlow data, Full Packet Capture (PCAP), Network forensic artifacts
  • Hands-on experience with enterprise SIEM platforms such as: Splunk, ArcSight, QRadar, McAfee Enterprise Security Management (Nitro), LogLogic.
  • Experience with: IDS/IPS technologies, Host-Based Security Systems (HBSS), Endpoint security tools, Malware analysis techniques
  • Unix/Linux command-line proficiency.
  • Scripting or programming experience.
  • Familiarity with: MITRE ATT&CK Framework, Cyber Kill Chain Methodology, Intelligence-Driven Defense concepts
Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.


While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually low to moderate.


Northern Technologies Group is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, age, or any other protected status under federal, state, or local law.


Travel

10%


Shift

Day Shift


Note

The company is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. This document does not create an employment contract, implied or otherwise, other than an “at will” relationship.


The salary range listed represents a good faith estimate and is provided in compliance with applicable pay transparency laws. The final compensation offered will be determined based on a variety of factors, including your skills, experience, qualifications, internal equity, and market conditions.

Requirements:


Apply