SOC Cyber Defense Analyst - SME (Journeyman) at Akira Technologies Inc. – Norfolk, Virginia

Akira Technologies is seeking a SOC Cyber Defense Analyst (SME / Journeyman) to support a government client in Norfolk, VA. This role provides hands-on cybersecurity monitoring, incident response, and forensic analysis across Operational Technology (OT), Industrial Control Systems (ICS), and enterprise network environments, including on-premises and cloud systems.

The ideal candidate has 5–7 years of cybersecurity operations experience, operates independently on complex incidents, and serves as a technical subject matter expert within the SOC while supporting and mentoring junior analysts.

This is an onsite position supporting NAVFAC in Norfolk, VA. This role requires Top Secret or higher clearance.

Key Responsibilities

• Perform cyber defense monitoring and forensic analysis across host and network systems, including malware triage, log correlation, and timeline reconstruction.
• Investigate security incidents using MITRE ATT&CK and Cyber Kill Chain methodologies.
• Support containment, eradication, and recovery actions in accordance with established incident response procedures.
• Serve as a journeyman-level SME, providing technical guidance and mentoring to junior SOC analysts.
• Monitor, tune, and enhance SIEM platforms (e.g., Splunk Enterprise Security, Elastic SIEM, Cribl) to improve detection and threat visibility.
• Develop and maintain SIEM correlation rules, dashboards, and continuous monitoring content using data models and tstats.
• Evaluate system and network configurations for vulnerabilities and recommend remediation aligned with DoD cybersecurity standards.
• Support STIG compliance activities and assist with Information Assurance Vulnerability Management (IVAM) actions.
• Utilize asset mapping and inventory tools to validate authorized devices and identify unauthorized or anomalous systems.
• Handle digital evidence in accordance with government forensic and chain-of-custody best practices.
• Produce concise technical and executive-level reports detailing findings, impacts, and mitigation recommendations.
• Collaborate with SOC leadership and government stakeholders to improve SOC workflows, threat hunting, and operational effectiveness.

Required Qualifications

• Active Top Secret clearance (or higher).
• 5–7 years of experience in cybersecurity operations, SOC analysis, or incident response.
• Strong knowledge of Windows and Linux operating systems, network traffic analysis, and security monitoring.
• Experience working within DoD cybersecurity frameworks and compliance-driven environments.
• Hands-on experience with tools such as Splunk (Enterprise Security preferred), Palo Alto, Elastic SIEM, Cribl, Nessus, CrowdStrike, VMware, or similar technologies.
• Demonstrated ability to independently lead investigations and communicate findings to technical and non-technical audiences.

Preferred Qualifications

• Experience supporting OT / ICS / SCADA environments.
• Advanced Splunk Enterprise Security content development experience.
• Familiarity with GrayNoise, Shodan, MODBus, PCAP analysis, or industrial protocols.
• Relevant certifications such as GCIH, CEH, GCED, OSCP, CISSP, or equivalent.

Leveling Summary

• Performs independently on complex incidents.
• Acts as a technical SME within the SOC.
• Mentors junior analysts without formal program or SOC ownership.
• Escalates advanced or strategic issues to senior or lead analysts.
  
  

Salary Range: $125,000 - $140,000

Akira’s pay range for this position considers various factors including skills, years of experience, training, licenses, certifications, alignment with market data, and internal equity in the organization. This pay range estimate is a general guideline only and not a guarantee of compensation or salary, which Akira believes to be done in good faith in compliance with local laws. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.

General Description of Benefits

Akira offers its employees multiple options for medical plans (some with Health Savings Account), dental plans, and vision coverage, and a 401(k) plan with employer match. To promote work/life balance, Akira offers paid time off, including vacation and sick time, holidays, paid parental leave, military leave, bereavement leave, and jury duty leave. We also offer short and long-term disability benefits to protect employee income in the event of sickness or injury, life insurance, accidental death and dismemberment insurance, and critical illness insurance. Akira also offers tuition, training, and certification reimbursement for professional development and career advancement.

Akira regularly reviews our total rewards package to ensure our offerings remain competitive and reflect the values and needs expressed by our employees.

About Akira Technologies

Akira strives to meet and exceed the mission and objectives of US federal agencies. As a leading small business cloud modernization and data analytics services provider, we deliver trusted and highly differentiated solutions and technologies that serve the needs of our customers and citizens. Akira serves as a valued partner to essential government agencies across the intelligence, cyber, defense, civilian, and health markets. Every day, our employees deliver transformational outcomes, solving the most daunting challenges facing our customers.

Akira is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.