{"schemaVersion":"jobsearcher.job.v1","id":"e65d29dbdbb1d3b6013df2d5","url":"https://jobsearcher.com/jobs/e65d29dbdbb1d3b6013df2d5","canonicalUrl":"https://jobsearcher.com/jobs/e65d29dbdbb1d3b6013df2d5","title":"SOC Analyst","description":"SOC Analyst\nExpression is seeking a SOC Analyst to join our team in support of the National Telecommunications and Information Administration (NTIA) ISCOM Division. In this role, you will provide cyber threat monitoring, analysis, and incident response support that strengthens program situational awareness and ensures resilience of critical federal networks. You will support Tier 1 and Tier 2 SOC operations, contribute to SOC playbook development, and help mature cyber defense strategies in a mission-focused environment.\nLocation and Clearance\nWashington, DC – Onsite\nActive Secret or Top Secret clearance required (U.S. Citizenship required)\n\nResponsibilities\nMonitor, detect, and analyze security threats, risks, and alerts using SOC tools, and initiate escalation as required.\nConduct cyber threat analysis and contribute to reports for program situational awareness.\nProvide Tier 1 response to security incidents and support escalation to Tier 2 during high-volume or critical events.\nConduct functional incident response teams during shifts, ensuring accountability and effective resolution.\nConduct malware analysis (static and dynamic) and assess Indicators of Compromise (IOCs).\nPerform network forensics and deep packet inspection to investigate intrusions.\nImplement remediation strategies and support recovery activities after incidents.\nRecommend process improvements and create new detection content to strengthen SOC operations.\nConduct proactive monthly threat hunts and provide reports to stakeholders.\nCollaborate with cyber teams for incident escalation, coordinated responses, and SOC policy/procedure development.\n\nQualifications\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field; OR equivalent certifications (CompTIA Security+, CISSP, GCIH, GCIA).\nMinimum of 4 years of experience in security operations, incident response, or cyber threat analysis.\nStrong knowledge of SOC operations, incident detection, and response workflows.\nFamiliarity with malware analysis, network forensics, and packet-level inspection.\nExcellent analytical, problem-solving, and communication skills.\n\nPreferred Experience\nAdvanced certifications such as CISSP, GCFA, GCIH, GCIA, or equivalent.\nPrior experience supporting NTIA, Department of Commerce, or other federal civilian agencies.\nHands-on experience with SIEM platforms, IDS/IPS, and endpoint monitoring tools.\nFamiliarity with the NIST Cybersecurity Framework and Risk Management Framework (RMF).\nExperience developing and maturing SOC playbooks, processes, and detection capabilities.\nBenefits\nExpression offers highly competitive salaries, performance-based incentives, and additional benefits, such as:\n401k matching\nPPO and HDHP medical/dental/vision insurance\nEducation reimbursement up to $10,000/yr\nComplimentary life insurance\nGenerous rollover PTO and 11 days of holiday leave\nOnsite gym facility at our HQ office in Washington DC\nCommuter Benefits Plan\nIn-office Cold Brew Coffee\n\nAbout Expression\nFounded in 1997 and headquartered in Washington, DC, Expression provides data fusion, data analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community.\nOur culture emphasizes creating immediate and sustainable value for our clients through agile delivery of tailored solutions and constant engagement. We were ranked #1 on the Washington Technology Fast 50 list of fastest-growing small business Government contractors and recognized as a Top 20 Big Data Solutions Provider by CIO Review.\nAt Expression, we ensure every team member has the tools and opportunities to grow while working with the newest technologies in the industry. We celebrate milestones, accomplishments, promotions, and collaborative achievements that make our workplace engaging and rewarding.\nEqual Employment Opportunity Statement\nExpression is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.","company":"Expression","rawCompany":"expression","city":"Washington","state":"DC","isRemote":false,"isActive":false,"createdAt":"2026-04-14T10:51:34.160Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"33-3021.06","title":"Intelligence Analysts","slug":"intelligence-analysts"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"SOC Analyst","description":"SOC Analyst\nExpression is seeking a SOC Analyst to join our team in support of the National Telecommunications and Information Administration (NTIA) ISCOM Division. In this role, you will provide cyber threat monitoring, analysis, and incident response support that strengthens program situational awareness and ensures resilience of critical federal networks. You will support Tier 1 and Tier 2 SOC operations, contribute to SOC playbook development, and help mature cyber defense strategies in a mission-focused environment.\nLocation and Clearance\nWashington, DC – Onsite\nActive Secret or Top Secret clearance required (U.S. Citizenship required)\n\nResponsibilities\nMonitor, detect, and analyze security threats, risks, and alerts using SOC tools, and initiate escalation as required.\nConduct cyber threat analysis and contribute to reports for program situational awareness.\nProvide Tier 1 response to security incidents and support escalation to Tier 2 during high-volume or critical events.\nConduct functional incident response teams during shifts, ensuring accountability and effective resolution.\nConduct malware analysis (static and dynamic) and assess Indicators of Compromise (IOCs).\nPerform network forensics and deep packet inspection to investigate intrusions.\nImplement remediation strategies and support recovery activities after incidents.\nRecommend process improvements and create new detection content to strengthen SOC operations.\nConduct proactive monthly threat hunts and provide reports to stakeholders.\nCollaborate with cyber teams for incident escalation, coordinated responses, and SOC policy/procedure development.\n\nQualifications\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field; OR equivalent certifications (CompTIA Security+, CISSP, GCIH, GCIA).\nMinimum of 4 years of experience in security operations, incident response, or cyber threat analysis.\nStrong knowledge of SOC operations, incident detection, and response workflows.\nFamiliarity with malware analysis, network forensics, and packet-level inspection.\nExcellent analytical, problem-solving, and communication skills.\n\nPreferred Experience\nAdvanced certifications such as CISSP, GCFA, GCIH, GCIA, or equivalent.\nPrior experience supporting NTIA, Department of Commerce, or other federal civilian agencies.\nHands-on experience with SIEM platforms, IDS/IPS, and endpoint monitoring tools.\nFamiliarity with the NIST Cybersecurity Framework and Risk Management Framework (RMF).\nExperience developing and maturing SOC playbooks, processes, and detection capabilities.\nBenefits\nExpression offers highly competitive salaries, performance-based incentives, and additional benefits, such as:\n401k matching\nPPO and HDHP medical/dental/vision insurance\nEducation reimbursement up to $10,000/yr\nComplimentary life insurance\nGenerous rollover PTO and 11 days of holiday leave\nOnsite gym facility at our HQ office in Washington DC\nCommuter Benefits Plan\nIn-office Cold Brew Coffee\n\nAbout Expression\nFounded in 1997 and headquartered in Washington, DC, Expression provides data fusion, data analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community.\nOur culture emphasizes creating immediate and sustainable value for our clients through agile delivery of tailored solutions and constant engagement. We were ranked #1 on the Washington Technology Fast 50 list of fastest-growing small business Government contractors and recognized as a Top 20 Big Data Solutions Provider by CIO Review.\nAt Expression, we ensure every team member has the tools and opportunities to grow while working with the newest technologies in the industry. We celebrate milestones, accomplishments, promotions, and collaborative achievements that make our workplace engaging and rewarding.\nEqual Employment Opportunity Statement\nExpression is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.","datePosted":"2026-04-14T10:51:34.160Z","dateModified":"2026-04-14T10:51:34.160Z","hiringOrganization":{"@type":"Organization","name":"Expression","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington","addressRegion":"DC","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"e65d29dbdbb1d3b6013df2d5"},"url":"https://jobsearcher.com/jobs/e65d29dbdbb1d3b6013df2d5"}}