160 siem analyst jobs at 86 companies in White Oak, MD
2w
Save
Mark Applied
Hide
Security Operations / SIEM Analyst
Washington, District of Columbia, United States
OnsiteFull Time
5+ YOERequires 5+ years of experience, a bachelor's degree in IT or related field, Security+, Splunk or SIEM certification, Secret clearance, and ITIL 4 Foundation preferred.
Splunk, Security Information and Event Management (SIEM), Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs)
2mo
Save
Mark Applied
Hide
SIEM / Threat Monitoring Analysts
Washington, District of Columbia, United States
OnsiteFull Time
3+ YOE3+ years SIEM administration and threat monitoring experience (Splunk preferred), OSINT monitoring, digital forensics, incident correlation, incident response knowledge; Secret clearance minimum, TS preferred.
Splunk
1w
Save
Mark Applied
Hide
Cyber Threat Analyst
Tysons or Virginia or North America
RemoteFull Time
5+ YOERequires 5+ years as a Tier 2 Cyber Threat Analyst, Security+ or CEH, SIEM, playbook implementation, threat hunting, MITRE ATT&CK, multi-cloud, network security, and US citizenship with clearance eligibility.
SIEM, Palo Alto XSOAR, Cyber Kill Chain, MITRE ATT&CK, Azure, AWS, Active Directory, EDR, FW, Windows, Linux, Mac, PowerShell, Python
1mo
Save
Mark Applied
Hide
SOC Analyst
McLean, Virginia, United States
$96k-$112k/yr OnsiteFull Time
1+ YOE1–2 years experience in information security or IT, familiarity with threat detection, incident response, SIEM/EDR tools, basic cloud knowledge, analytical and communication skills.
SIEM, IDS/IPS, EDR, Splunk, Chronicle, Python, Bash, AWS, GCP, Azure, LLMs
1mo
Save
Mark Applied
Hide
Cybersecurity Analyst
Tysons, Virginia, United States
$115k-$190k/yr OnsiteFull Time
3+ YOEActive TS/SCI with poly required; 3+ years SOC/Security Operations experience; experience with SIEM, IDS, EDR, case management, OS, networking, scripting, and security troubleshooting.
SIEM, IDS, EDR, Case Management Tools, STIG
1mo
Save
Mark Applied
Hide
SOC Analyst
Washington, District of Columbia, United States
RemoteFull Time
3+ YOEAbility to obtain DHS Public Trust, Bachelor's degree with 3 years IT/cybersecurity experience, SIEM/SOAR and cloud (AWS/Azure) knowledge, experience with Splunk ES, Tenable, CrowdStrike, and incident response skills.
Splunk ES, Tenable, CrowdStrike, Lookout, Swimlane, Axonious, Windows, Linux, AWS, Azure, SIEM, SOAR
1mo
Save
Mark Applied
Hide
Cybersecurity Analyst, Security Operations Center (SOC) Analyst
Bethesda, Maryland, United States
HybridFull Time
2+ YOEBachelor's degree and 2+ years SOC or cybersecurity operations experience; U.S. citizenship and ability to obtain Tier 2 Public Trust; experience with SIEM/EDR/XDR; rotating shift availability; strong analytical and communication skills.
Microsoft Sentinel, Splunk Enterprise Security, Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud, CrowdStrike Falcon, Palo Alto Cortex XDR, Trellix, Cisco Secure, Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Intrusion Detection and Prevention Systems (IDS/IPS), Microsoft Office Suite, ServiceNow, Jira
1mo
Save
Mark Applied
Hide
Senior Sensor Analyst
Linthicum, Maryland, United States
$135k-$216k/yr OnsiteFull Time
Requires advanced degree or extensive experience in IT/Cybersecurity, proficiency with network and sensor data (Netflow, PCAP), SIEM, NIDS/IPS, EDR, vulnerability scanning, experience producing intelligence products, and active TS/SCI with poly.
Netflow, PCAP, SIEM, NIDS, IPS, EDR, vulnerability scanners, log collectors
3w
Save
Mark Applied
Hide
Principle Cybersecurity Analyst - Remote
Washington or Minneapolis or United States
$113k-$193k/yr RemoteFull Time
3+ YOE3+ years in threat intelligence, security engineering, IR or malware analysis; strong software engineering and cybersecurity integration experience; experience with TIPs, SIEM, SOAR, and automation.
Splunk, Microsoft Sentinel, IBM QRadar, Elastic, Python, Java, JavaScript/Node.js, Go, REST APIs, JSON, STIX/TAXII, Bash, PowerShell, Git, CI/CD, Linux, Ubuntu, CentOS, RHEL, Kali, AWS, Docker, Windows Server, Active Directory, Mac OS X, LLM, MCP, RAG, SIEM, SOAR, EDR, NDR, MISP, OpenCTI, ThreatConnect, Anomali, ThreatQuotient, Cortex XSOAR, Splunk SOAR, Swimlane, Tines, Kafka, Spark, Elasticsearch
1mo
Save
Mark Applied
Hide
IT Security Analyst
Hanover, Maryland, United States
$95k-$125k/yr HybridFull Time
3+ YOEBachelor's degree and minimum 3 years IT security experience, CompTIA Security+ required; experience with SIEM, EDR, Microsoft 365 security, PowerShell, HIPAA, and healthcare EHR environments preferred.
SIEM, EDR, Proofpoint, Microsoft Entra ID (Azure AD), Microsoft Exchange Online, Microsoft Defender, Conditional Access, Microsoft Purview, PowerShell, RMM, Windows
1w
Save
Mark Applied
Hide
SOC Analyst (Tier 2)
Washington, District of Columbia, United States
$125k-$135k/yr OnsiteFull Time
3+ YOEBachelor's degree or 3 years of cybersecurity experience; IAT certification, network protocols, Windows and Linux, IDS, SIEM, packet capture, log analysis, and cyber threat intelligence knowledge required.
Endpoint Detection & Response, Security Information and Event Management (SIEM), Intrusion Detection Systems (IDS), TCP/IP, UDP, SMTP, SSH, Windows, Linux, PCAP, NGFWs, proxies, switches, routers, OSI Layer
4d
Save
Mark Applied
Hide
(USA) Senior Intrusion Analyst
Bentonville or Herndon
$90k-$180k/yr OnsiteFull Time
3+ YOEBachelor’s degree plus 3 years of intrusion analysis experience, or 5 years of experience. Requires SOC expertise, incident response, risk assessment, SIEM proficiency, and intrusion management experience.
Chronicle, Sentinel, NIST, MITRE ATT&CK, XSOAR, Google SOAR, Agentic AI, ChatGPT, Copilot, Gemini, MDE, Sysinternals, Security Information and Event Management (SIEM), Web Content Accessibility Guidelines (WCAG) 2.2 AA
2w
Save
Mark Applied
Hide
SOC Analyst Shift Lead
San Antonio or Hanover or Washington
$92k-$153k/yr OnsiteFull Time
6+ YOESix-plus years of experience in cybersecurity or IT, SOC shift leadership, incident response, SIEM and log analysis, U.S. citizenship, ability to obtain Public Trust, and high school diploma or equivalent.
Security Information and Event Management (SIEM), Splunk, QRadar, Microsoft Sentinel, Python, PowerShell, MITRE ATT&CK, NIST, CIS Controls
3w
Save
Mark Applied
Hide
Security Analyst - Tier 2
Washington, D.C. or Boston
$120k-$140k/yr RemoteFull Time
2+ YOERequires 2+ years in cybersecurity operations, alert investigation across endpoint, network, identity, email, and cloud sources, SIEM querying, incident triage, malware analysis, and strong analytical and interpersonal skills.
XDR, SIEM, IDS/IPS, IDP, MITRE ATT&CK, SPL, KQL, FQL, SQL
2mo
Save
Mark Applied
Hide
SOC Analyst
Alexandria, Virginia, United States
$150k-$165k/yr OnsiteFull Time
8+ YOEU.S. citizen with active DoD Top Secret/SCI clearance, bachelor’s degree with 8+ years relevant experience (or 12+ without degree), 2+ years SOC and incident response experience, DoD 8570 IAT II cert prior to start, must obtain CSSP-Analyst cert within 6 months.
NetFlow, Full Packet Capture (PCAP), SIEM, Splunk, ArcSight, QRadar, McAfee Enterprise Security Management (Nitro), LogLogic, IDS/IPS, HBSS, Unix, Linux, MITRE ATT&CK Framework, Cyber Kill Chain Methodology, TCP/IP
3w
Save
Mark Applied
Hide
Cloud SOC Analyst
San Antonio or McLean
$99k-$225k/yr OnsiteFull Time
4+ YOERequires 4+ years in SOC or cybersecurity teams, 3+ years with cloud SIEM or SOAR, incident response and IT forensics experience, Secret clearance, bachelor's degree, and DoD 8570 IAT II certification eligibility.
Splunk, AWS, Azure, OCI, GCP, Infrastructure as Code (IaC), Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR)
2mo
Save
Mark Applied
Hide
Cybersecurity SOC Analyst II
Los Angeles or San Francisco or Washington or San Diego or Seattle or London
$110k-$160k/yr OnsiteFull Time
3+ YOE3+ years cybersecurity/IT experience, U.S. citizenship eligible for government facilities, familiarity with SIEM/EDR/XDR, CrowdStrike, Azure Sentinel, Microsoft GCC High, scripting (PowerShell/Python/Bash), and security incident response.
Coherent Distributed Networks (CDN\u000217), Microsoft GCC High, CrowdStrike, EDR/XDR, PIM/PAM Tools, SIEM, Azure Sentinel, AI, LLM, PowerShell, Python, Bash, MITRE ATT&CK
1w
Save
Mark Applied
Hide
Security Operations Analyst
Washington or Costa Mesa
$129k-$171k/yr OnsiteFull Time
Requires security monitoring, log analysis, detection engineering, Python development, SIEM language experience, data lake analysis, broad security knowledge, strong communication, and ability to obtain a U.S. Top Secret clearance.
Python, SPL, KQL, SQL, SIEM, AWS, Azure, GCP, Windows, Linux, MacOS, Lattice OS
1w
Save
Mark Applied
Hide
Digital Forensics Analyst
Alexandria, Virginia, United States
OnsiteFull Time
5+ YOERequires 5+ years in digital forensic analysis, media and mobile acquisition, malware analysis, M365, Azure, AWS, virtual machines, CloudTrail, IAM logs, EDR, SIEM, and packet capture; Public Trust clearance required.
Windows, Linux, Mac, M365, Microsoft Azure, AWS, Virtual Machines, CloudTrail, IAM, EDR, SIEM, SANS GIAC, GCIH, GCFA, GCFE, GREM, GISF, GXPN, GCTI, GOSI, EnCase, EnCE, CFSR, ENCEP
1w
Save
Mark Applied
Hide
Cybersecurity Investigations Analyst
Beltsville, Maryland, United States
$122k-$158k/yr OnsiteFull Time
1+ YOEOne year of GS-12-equivalent specialized cybersecurity experience, including SIEM analysis, breach investigation, audit-trail validation, data correlation, and cybersecurity evaluations; U.S. citizenship and GS-12 time-in-grade may apply.
Security Information and Event Management (SIEM), USA Hire, USAJOBS
Explore Jobs