SOC Analyst Tier II

SOC Analyst Tier II
Herndon, VA / Onsite
Active Secret clearance required

Blu Omega is seeking a SOC Analyst Tier II to support a federal cybersecurity program focused on continuous diagnostics and mitigation. This role operates within a 24x7x365 Security Operations Center (SOC) environment and is responsible for advanced threat detection, incident response, and security analysis across enterprise security monitoring operations. The position requires experience supporting SOC monitoring and incident response activities within a mission-driven environment.
Program Overview

Support a high-visibility federal cybersecurity program aligned to a Continuous Diagnostics and Mitigation (CND) mission in a mature SOC environment.
Key Details

Location: Herndon, VA (Onsite)
Clearance: Active Secret clearance required
Schedule: Shift-based environment (initially day shift, transitioning to an assigned shift after onboarding)

• Back Half Days: Wednesday-Saturday, 6:00 AM-6:00 PM
• Back Half Nights: Wednesday-Saturday, 6:00 PM-6:00 AM

Responsibilities

• Monitor, analyze, and triage security events and alerts generated by the client's SIEM in a 24x7x365 SOC environment
• Perform advanced incident response activities, including investigation, containment, eradication, and recovery
• Conduct deep-dive analysis of security alerts to identify malicious activity and potential threats
• Analyze logs and data from various sources including firewalls, IDS/IPS, endpoints, and network devices
• Leverage tools such as Splunk, Tanium, Trellix (McAfee ePO), Zscaler, Microsoft Defender, and FireEye for threat detection and response
• Escalate and coordinate incidents as appropriate, providing detailed documentation and reporting
• Support continuous improvement of SOC processes, detection use cases, and response procedures
• Maintain awareness of emerging threats, vulnerabilities, and attack vectors

Required Qualifications

• Minimum of 2 years of experience in a SOC or NOC environment performing security monitoring and analysis
• Strong experience with SIEM platforms, specifically Splunk
• Hands-on experience with EDR tools supporting incident investigations
• Solid understanding of the incident response lifecycle
• Working knowledge of operating systems including Windows, Linux, and macOS
• Strong understanding of network protocols and communications (TCP, UDP, ICMP, BGP, MPLS)
• Familiarity with common enterprise services and protocols (DNS, DHCP, HTTP/HTTPS, SMTP, SQL)
• Experience analyzing logs from firewalls, IDS/IPS, and other security infrastructure
• Ability to operate effectively in a fast-paced environment with shifting priorities
• High School Diploma required

Preferred Qualifications

• Experience in a federal or government SOC environment
• Exposure to enterprise security tooling including Tanium, Trellix, Zscaler, Microsoft Defender, and FireEye
• Strong analytical and problem-solving skills
• Prior experience operating in shift-based environments

Compensation

Salary Range: $75,000.00 - $115,000.00
Final compensation is based on technical skills, experience, education, certifications, and clearance.
Blu Omega Benefits & Perks

Medical, Dental, and Vision coverage through national providers
401(k) with company match (eligible after 6 months; vesting applies)
Company-paid Life and AD&D insurance with additional voluntary options
Short-term disability (company-paid) and long-term disability options
Employee Assistance Program (EAP) with 24/7 confidential support and mental health resources
Telehealth and virtual care options available through medical plans
Pet insurance, legal services, and identity theft protection options
Paid Time Off (PTO) for eligible employees
Paid federal holidays for salaried employees
Access to wellness programs, discounts, and lifestyle benefits
Benefits eligibility and offerings may vary based on role, employment status, and program requirements.
Company Overview

Blu Omega is a Woman-Owned Small Business (WOSB) delivering technology and cybersecurity solutions to federal agencies and enterprise clients nationwide. Headquartered in Ashburn, VA, we support mission-critical programs across civilian and defense sectors, including health, national security, and regulatory environments.

We partner with government agencies and large integrators to provide expertise in cybersecurity operations, cloud and infrastructure modernization, data and analytics, and enterprise IT support. Our teams are experienced operating within federal contracting environments, supporting task orders, recompetes, and programs requiring cleared personnel and compliant delivery.
Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability.

#CJ
#LI-Onsite