Security Operations Center Analyst — Mantua, VA at

About the Team

ECS Federal LLC is the federal segment of a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We value attracting and developing top talent, fostering a culture that is engaging, accountable, and mission-driven.

About the Role

This position supports the War Data Platform (WDP), a key initiative within the U.S. Department of War's AI-First strategy. The WDP separates business and financial data from operational warfighting data to accelerate the deployment of artificial intelligence on the battlefield. It extends across Unclassified, Secret, and Top Secret environments, supporting collaboration between Combatant Commands, Joint Staff directorates, and senior leadership.

As a Security Operations Center Analyst, you will be the guardian of this critical infrastructure, supporting a 24/7 continuous monitoring mission. You will operate within an integrated SOC environment leveraging Splunk SIEM, SOAR-driven automation, and AI-assisted triage capabilities. Your day-to-day involves identifying adversary behavior, containing incidents, and sustaining cyber defense resilience across NIPRNet, SIPRNet, and JWICS. You will not only investigate security events and conduct threat hunting but also provide technical mentorship to junior analysts and deliver operational reporting that supports mission assurance across combat support and intelligence environments.

Location and Contingency

This role is based in the National Capital Region, covering the Pentagon, Falls Church, and Fairfax. Please note that this position is contingent upon contract award.

Equal Opportunity

ECS Federal LLC is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law.

Work location

Work model: On-site

9115, Santayana Drive, Mantua, Fairfax County, Virginia, 22031, United States

Mantua, Virginia

Key Responsibilities

check_circleExecute continuous security monitoring across classified and unclassified DoW networks
check_circleAnalyze security events from Splunk and Elastic to identify anomalous activity
check_circleConduct structured incident investigations using established response playbooks
check_circlePerform proactive threat hunting using MITRE ATT&CK mappings and telemetry data
check_circleCoordinate containment and remediation actions with system administrators and ISSOs
check_circleMaintain detailed incident records and forensic timelines for after-action reporting
check_circleTune detection logic and refine correlation rules to reduce false positives
check_circleProvide technical mentorship to junior analysts through peer reviews and shift handovers
check_circleDeliver operational reporting products including incident summaries and threat assessments

Requirements

verifiedCurrent Secret security clearance with ability to obtain Top Secret
verifiedMinimum 3 years experience in security operations, cyber threat analysis, or incident response within federal, defense, or intelligence environment
verifiedActive IAM Level I certification (CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC)
verifiedProficiency with enterprise SIEM platforms such as Splunk or Elastic

Nice to Have

Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility. Experience applying the MITRE ATT&CK framework to proactive threat hunting operations. Familiarity with SOAR platform operations and AI-assisted triage workflows. Working knowledge of the DoW Risk Management Framework (RMF), continuous monitoring requirements, and the transition to the Cybersecurity and Risk Management Continuum (CSRMC). Prior experience providing peer mentorship, shift handover documentation, or junior analyst development within a 24/7 SOC environment.

Frequently asked questions about Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco

What does a Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco do?expand_more

Day-to-day, the Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco will execute continuous security monitoring across classified and unclassified dow networks; analyze security events from splunk and elastic to identify anomalous activity; conduct structured incident investigations using established response playbooks; and perform proactive threat hunting using mitre att&ck mappings and telemetry data.

What are the requirements for this Security Operations Center Analyst with Security Clearance role?expand_more

Episcopal Community Services of San Francisco is looking for candidates who meet the following requirements: Current Secret security clearance with ability to obtain Top Secret; Minimum 3 years experience in security operations, cyber threat analysis, or incident response within federal, defense, or intelligence environment; Active IAM Level I certification (CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC); and Proficiency with enterprise SIEM platforms such as Splunk or Elastic.

Where is the Security Operations Center Analyst with Security Clearance role at Episcopal Community Services of San Francisco located?expand_more

Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco is based in 9115, Santayana Drive, Mantua, Fairfax County, Virginia, 22031, United States. This is a on-site role.

Is this Security Operations Center Analyst with Security Clearance job remote, hybrid, or on-site?expand_more

Episcopal Community Services of San Francisco has listed this Security Operations Center Analyst with Security Clearance role as on-site.

How much experience is required for this Security Operations Center Analyst with Security Clearance role?expand_more

Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco typically requires 3+ years of relevant experience at the mid level level.

What skills do you need for the Security Operations Center Analyst with Security Clearance role at Episcopal Community Services of San Francisco?expand_more

Key skills for Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco include Splunk; Elastic; Siem; Soar; Mitre Att&ck; Comp Tia Security+ Ce; Isc² Cap; and Isc² SSCP.

What category does the Security Operations Center Analyst with Security Clearance role belong to?expand_more

Security Operations Center Analyst with Security Clearance at Episcopal Community Services of San Francisco is part of the it job category on Recrutus.

Security Operations Center Analyst with Security Clearance