SOC Analyst II

ECS is seeking a SOC Analyst II to provide remote cybersecurity operations support, contingent upon contract award. The role performs continuous monitoring, threat analysis, incident response, investigation documentation, forensic support, and collaboration with senior analysts and response teams to improve the organization's security posture.

Responsibilities:

• Performs SOC Tier 1–3 continuous monitoring of SIEM, SOAR, EDR, IAM, DLP, vulnerability management, and other automated security platforms
• Conducts triage, threat analysis, threat hunting, correlation, enrichment, risk mitigation, and incident response activities
• Documents investigations and artifacts in accordance with IRS and DHS reporting requirements and supports insider threat program and forensic collection
• Collaborates with senior analysts and incident response teams to mitigate risks, enhance security monitoring capabilities, and improve the organization's security posture

Requirements:

• Bachelors' Degree in Cybersecurity, IT, or related field
• 3+ year of experience of SOC experience
• IRS CI - IRS High Risk Clearance
• Knowledge of SIEM, SOAR, EDR, DLP, IAM/PAM tools
• Experience with incident response, threat intelligence, threat hunting, triage, and investigation
• Understanding of federal incident reporting (NIST 800-53, FISMA, IRM 10.8, DHS/Treasury requirements)
• Ability to document cases and perform forensic support