Attack Sensing & Warning Analyst
Core
Perform Tier II analysis of escalated security events, support SOC SOP development, and draft executive-level cyber incident reports.
Role type
Mid-level SOC Analyst (Tier II)
Builds
Cybersecurity detection content, playbooks, and executive incident reports
Domain
Federal Cybersecurity / Defense
Required skills
Tier II incident analysis, SOC SOP development, incident escalation, data spillage response, security content creation (signatures/rules), monitoring tool health checks, CISA directive implementation
Preferred skills
SIEM correlation rule tuning, EDR policy tuning, CCIR drafting, Tier I analyst mentoring
Technologies
SIEM, EDR, IDS, IPS, DLP
Responsibilities
Analyze escalated security events from Tier I monitoring, update SOC Standard Operating Procedures (SOPs), create and escalate cybersecurity investigations, support Information/Data Spillage Incident Response, make security content recommendations for detection tools, draft executive-level Cyber Incident Reports, monitor tool health and log ingestion, support ad hoc data calls and CISA Binding Operational Directives
Seniority
Mid-level, hands-on IC
