Attack Sensing & Warning Analyst Mid
Core
Mid-level analyst performing deep analysis of escalated security events, supporting SOC SOP development, and drafting executive-level cyber incident reports.
Role type
Mid-level SOC Tier II Analyst
Builds
SOC detection content, playbooks, and executive incident reports
Domain
US Federal Government Cybersecurity / Defense
Required skills
Tier II security event analysis, SOC SOP development, incident escalation, security content recommendations (signatures/rules), executive report drafting, monitoring tool health checks, data enumeration
Preferred skills
SIEM correlation rule tuning, EDR detection policy tuning, CCIR drafting process familiarity, Tier I analyst mentoring
Technologies
SIEM, EDR, IDS, IPS, DLP
Responsibilities
Perform Tier II analysis of escalated security events; Support SOC SOP updates for DHS 4300A and NIST compliance; Create and escalate cybersecurity investigations; Support triage of data spillage incidents; Make security content recommendations for SIEM/EDR/IDS; Assist with monitoring tool health and log ingestion; Support ad hoc data calls and CISA directives
Seniority
Mid-level, hands-on IC
