SOC Incident Response Analyst - Hybrid - Active Secret

ABOUT US

Rollout Systems works with a wide spectrum of talent to establish an atmosphere that stimulates creativity, constant progress, and achievement. We believe in empowerment for success and providing the tools to do the best job for our customers. Our corporate values are transparent; being open and honest with each other.
Come and join our dynamic team!

Seeking a highly motivated and driven SOC Incident Response Analyst to work Hybrid - 3 Days Per Week Onsite supporting enterprise IT for our War-fighter customer who upholds America's status as the "Land of the Free" every day, at work, or at play.

• Monitor and triage alerts from SIEM, EDR, IDS/IPS, and other security tools to identify suspicious activity.
• Perform initial investigation and classification of security incidents; escalate when necessary.
• Coordinate and orchestrate incident response efforts: containment, eradication, recovery, and documentation.
• Support digital forensic investigations, including evidence collection, preservation, and basic analysis.
• Provide regular status updates when conducting forensics.
• Provide a written report at the conclusion of each forensics examination.
• Prepare and present forensic findings in the form of briefings and/or reports, to government leaders and managers, as required.
• Review logs and telemetry from endpoints, firewalls, servers, and cloud platforms to identify indicators of compromise (IOCs).
• Collaborate with IT and security teams to apply mitigation actions such as patching, blocking IPs, and adjusting configurations.
• Participate in post-incident reviews (PIRs) and help implement improvements to detection and response capabilities.
• Contribute to the development and maintenance of SOC playbooks, runbooks, and response procedures.
• Assist with Open-Source Intelligence (OSINT) monitoring and IOC enrichment.
• Continuously improve knowledge of cybersecurity frameworks, threat actor TTPs (MITRE ATT&CK), and forensic methodologies
• Handle sensitive file transfers IAW DoD Policies and procedures
• Query the classified network for any new vulnerabilities or weaknesses discovered by higher level commands that affect the status of the unclassified network

• 5 years of foundational knowledge of cybersecurity concepts, such as incident handling lifecycle, threat intelligence, and basic to intermediate forensics.
• Experience working with security tools (SIEM, EDR, SOAR, threat intel feeds) and basic incident response workflows.
• Hands‑on experience with SIEM (e.g., MDE, Splunk, QRadar, Arc Sight), EDR (e.g., Crowd Strike, Defender, Sentinel One), and basic SOAR concepts.
• Experience with incident response tooling, digital forensics, and evidence handling.
• Understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, VPNs, firewalls).
• Strong analytical and problem‑solving skills with a structured, methodical approach.
• Excellent written and verbal communication; ability to produce clear incident reports, documentation and manuals.
• Ability to work in a fast-paced environment and participate in on‑call rotations (as needed).
• Commitment to continuous learning and professional growth in cybersecurity.

• CompTIA Security+ CE
• Certified Ethical Hacker (CEH)
• SANS GCIH, GIAC GCIA or Equivalent

• Active Secret Security Clearance

• BS or BA degree in Computer Science, Cybersecurity or related field. Allowable Substitution: 6 years of related experience or 4 years of related experience with an AA/AS degree

----------------------------------------------------------------------------------------------------------------------------------------------------------------

• Generous PTO/Leave Package
• 11 Paid Federal Holidays
• Medical, Dental, & Vision Plan
• Short-Term & Long-Term Disability
• Accidental Death & Dismemberment
• 401K Retirement & Matching
• Profit Sharing Plan
• Free Training & Development Subscription
• Tuition Assistance Program
• Direct Deposit

Built upon open communications and teamwork principles that keep a talented, tenured workforce in place; consistent quality services; proactive, out‑of‑the‑box thinking, and the highest ethical values.