About This Role
The DC Office of the Chief Technology Officer (OCTO) needs a Tier 3 SOC Analyst to provide advanced technical and analytical oversight of a SOC team monitoring, detecting, analyzing, and responding to cybersecurity incidents across the District’s infrastructure. This is the advanced escalation point above Tier 2: deep analysis, threat hunting, detection tuning, and incident response. 100% onsite in Washington, DC.
What you’ll do
• Serve as the advanced (Tier 3) escalation point: scrutinize and provide corrective analysis to cybersecurity events escalated from Tier 2 and escalate confirmed incidents to the Incident Response Lead
• Provide in-depth analysis and trending/correlation of large data sets (logs, events, alerts) across network devices and applications to troubleshoot incidents and recommend remediation
• Proactively threat-hunt through log, network, and system data to find undetected threats
• Tune security tools: develop and adjust detection rules, build response…
This is a summary. The complete job description, requirements, and benefits are on the employer's application page.
Why Cybersecurity Is Hard to Automate
Hackers are human. The intuition to outthink them, detect zero-days, and respond under pressure belongs to trained human analysts — not the algorithms they protect against.
Will AI replace cybersecurity analysts? See the risk score →
Need credentials? Browse cybersecurity training & apprenticeships →