Lead SOC Analyst

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dragonfli Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

🔒 Cybersecurity

💼 Consulting

Cybersecurity • Consulting

Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. The company transforms its clients’ businesses by leveraging high impact strategic planning and technology solutions coupled with expertise in infrastructure, corporate strategy, and operations. Dragonfli Group’s passionate and experienced consultants take a collaborative approach to provide strategic planning and information security solutions to organizations looking to increase profitability, streamline operations, manage risk, meet regulatory demands, and build market share.

📋 Description

• Lead advanced investigation and incident response for escalated events across client tenants • Conduct proactive threat hunting • Perform quality control review of Tier 1 and Tier 2 triage, investigation, and documentation • Mentor and provide real-time guidance to Tier 1 and Tier 2 analysts on shift • Own complex containment, response, and escalation decisions • Serve as the primary point of contact for clients and on-call leadership during overnight events • Drive continuous improvement of standard operating procedures, runbooks, and detection tuning • Support monthly reporting with accurate event and response data and trend analysis

🎯 Requirements

• United States citizenship • Ability to pass a drug screening and a full background investigation, including verification of references, employment history, education, and certifications • 6+ years of SOC or security operations experience, including incident response and mentoring or leadership • Demonstrated threat hunting and advanced investigation experience • Strong command of SIEM and EDR platforms and vulnerability management workflows • Understanding of the incident lifecycle: detection, triage, containment, and escalation • Ability to work overnight shifts reliably on a rotation that includes weekends • Excellent written communication and documentation discipline • Expert-level experience with Microsoft Sentinel, Splunk, CrowdStrike or comparable EDR, and Tenable preferred • GCIH, GSEC, GCFA, CySA+, or similar advanced certification preferred • Scripting or automation experience with Python or PowerShell preferred • Prior managed security services or multi-tenant SOC leadership experience preferred • Exposure to critical-infrastructure environments preferred • Residency in the Hampton Roads, Virginia area preferred

🏖️ Benefits

• Medical – Multiple POS health plan options including an HSA-compatible plan • Dental – PPO coverage for preventive, basic, and major services • Vision – Annual exam, frames, lenses, and contact lens allowance • 401(k) – Employer match up to 5% of eligible compensation • Long-Term Disability – 100% employer-paid coverage at 50% of pre-disability earnings • Life Insurance & AD&D – 100% employer-paid coverage valued at $10,000 each • PTO – 15–25 days annually based on tenure • Paid Federal Holidays – All 11 federal holidays observed