SOSi
Defense and government services
SeniorCyberDefenseAnalyst
“Senior Cyber Defense Analyst at SOSi. Skills: Cyber defense leadership, Threat defense, Incident response, Threat hunting. Serve as senior analyst and shift lead. Provide direction on monitoring priorities”
What You'll Achieve.
Protect critical warfighter networks; Ensure precision; Ensure speed; Ensure mission assurance
Industry & Context.
Threat hunting; Incident investigation; Triage; Anomaly detection; Root cause analysis
Active Top Secret/SCI clearance, Support 24/7/365 operations, Rotating shifts, Nights, Weekends, Holidays, On-call support, Surge coverage
What They're Looking For.
Must Have
Active in-scope Top Secret/SCI clearance, DoD 8140 / 8570 IAT Level II certification required within 180 days, Minimum 5+ years SOC/CSSP/DCO/cyber defense experience, Demonstrated incident response expertise, Demonstrated threat hunting expertise, Experience serving as senior analyst/shift lead/escalation point, Understanding of adversary TTPs, Understanding of MITRE ATT&CK, Understanding of malware analysis fundamentals, Understanding of cyber kill chain concepts, Understanding of advanced detection and response techniques, Hands-on experience with SIEM, Hands-on experience with EDR, Hands-on experience with SOAR, Hands-on experience with packet capture and analysis tools, Hands-on experience with enterprise monitoring platforms, Ability to coordinate cross-functional response efforts, Written and verbal communication skills, Must be flexible to support 24/7/365 operations
Nice to Have
Advanced certifications (GCIA, GCIH, GDAT, GCTI, CISSP, CASP+), Experience supporting DISA/CSSP/TNCC/INDOPACOM/coalition/military cyber defense, Prior Tier 2/3 SOC analyst experience, Prior shift lead experience, Prior incident commander experience, Prior battle captain experience, Prior major incident coordination experience, Experience with AI/ML-assisted SOC platforms, Experience with automation pipelines, Experience with SOAR workflows, Experience with operational analytics platforms, Experience building/maturing SOC workflows, Experience building/maturing CONOPS, Experience building/maturing SOPs, Experience building/maturing escalation procedures, Experience building/maturing dashboards, Experience building/maturing reporting products
What You'll Do.
Serve as senior analyst and shift lead
Provide direction on monitoring priorities
Provide direction on triage
Provide direction on threat hunting
Provide direction on incident investigation
Coordinate shift-level cyber defense response
Escalate to Incident Response Lead
Escalate to INSOC leadership
Validate escalated detections
Adjudicate escalated detections
Prioritize escalated detections
Lead initial incident triage
Support containment activities
Support remediation activities
Support evidence preservation
Support reporting activities
Support handoff activities
Mentor junior analysts
Mentor mid-level analysts
Serve as shift-level liaison
Refine SOAR playbooks
Refine AI-assisted workflows
Refine response procedures
Conduct threat hunting
Ensure incidents are documented
Ensure investigations are documented
Ensure shift notes are documented
Ensure case updates are documented
Ensure lessons learned are documented
Support red team events
Support tabletop exercises
Support operational drills
Support after-action reviews
Provide clear verbal shift updates
Provide clear written shift updates
Provide incident summaries
Provide operational reporting
Maintain awareness of enterprise cyber environments
Maintain awareness of network environments
Maintain awareness of system environments
Maintain awareness of mission environments
Support timely detection
Support mission-impact assessment
Support compliance with RMF
Support compliance with CSSP
Support compliance with DoD 8140
Support compliance with SOPs
Support compliance with accreditation requirements
How You'll Work.
Team & Collaboration
Analysts; DCAI engineers; Detection engineering; NetOps; SysOps; Mission partners; Incident Response Lead; DCO Lead; INSOC leadership; Government stakeholders; External mission partners
Communication Scope
Brief technical findings; Brief incident status; Brief operational risk; Brief recommended actions
Applying for this Senior Cyber Defense Analyst role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on SmartRecruiters
- SmartRecruiters often includes a video screening step — check camera and mic permissions.
- Link your GitHub or portfolio directly in the profile section for technical roles.
- Applications may be reviewed by AI scoring before reaching a recruiter — use keywords from the job description.
ANONYMOUS · UNFILTERED
What do employees actually say about SOSi?
Real rants from real employees. Read before you apply.