Tier 2 Security Operations Center (SOC) Analyst with Security Clearance

R-00194216 Description Leidos is seeking experienced Tier 2 Security Operations Center (SOC) Analysts to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC. The Tier 2 SOC Analyst will perform advanced analysis of cybersecurity events escalated from Tier 1 or identified through enterprise monitoring capabilities. This position will correlate security data, determine the scope and potential impact of suspicious activity, support incident triage and containment, preserve evidence, and coordinate with incident responders and other cybersecurity teams to protect DHRA systems and networks. Work Locations: Mission Environment DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). The Tier 2 SOC Analysts operate within a 24x7 security operations environment responsible for detecting, analyzing, escalating, and supporting response to cybersecurity activity affecting DHRA systems and networks. Tier 2 analysts provide the deeper technical analysis required when events cannot be resolved through I Initial Tier 1 triage. Primary Responsibilities * Perform advanced analysis of cybersecurity events escalated from Tier 1 analysts or identified through endpoint, user-activity, network, and other enterprise monitoring capabilities.
* Correlate alerts, security telemetry, and supporting technical data to determine the nature, scope, severity, and potential impact of cybersecurity activity.
* Distinguish legitimate activity, false positives, policy violations, suspicious behavior, and potential cybersecurity incidents.
* Determine appropriate next actions based on approved SOC procedures, playbooks, and escalation criteria.
* Recommend or initiate authorized actions to contain or mitigate identified threats.
* Support cybersecurity incident triage, escalation, and containment in coordination with the incident-response team.
* Preserve relevant technical evidence and supporting information required for further investigation and incident response.
* Document investigative actions, analysis, findings, and conclusions in Government-approved systems.
* Maintain complete and accurate event records, tickets, timelines, and supporting evidence.
* Contribute to required SOC event reporting and operational status information.
* Perform Tier 2 troubleshooting of cybersecurity tools, alerts, security data, and related technical issues.
* Use approved Commercial-Off-The-Shelf (COTS) security-analysis tools to investigate cybersecurity events.
* Support security testing, mitigation activities, and cybersecurity compliance checking as required by SOC operations.
* Coordinate analysis with incident responders, network engineers, endpoint-security personnel, cybersecurity-tool teams, system administrators, and other cybersecurity stakeholders.
* Identify recurring false positives, detection gaps, or ineffective alerting and recommend improvements to monitoring and detection capabilities.
* Support tuning of cybersecurity monitoring capabilities to improve detection accuracy and analyst effectiveness.
* Contribute to SOC procedure, playbook, and process improvements based on operational experience and lessons learned.
* Support knowledge transfer across SOC analysts to improve consistent analysis and response within the 24x7 operating environment. Basic Qualifications * BS degree or equivalent and 2+ years of prior relevant experience, or a Masters with less than 2 years prior relevant experience. In lieu of degree, additional experience may be required.
* Experience performing cybersecurity event analysis, SOC operations, cyber defense, incident triage, or security monitoring.
* Experience analyzing and correlating alerts from multiple cybersecurity monitoring capabilities.
* Experience investigating endpoint, network, user-activity, or other cybersecurity events.
* Experience determining the scope, severity, and potential impact of suspicious cybersecurity activity.
* Experience supporting cybersecurity incident escalation, containment, mitigation, or evidence preservation.
* Experience using enterprise security-analysis or cybersecurity monitoring tools.
* Experience performing Tier 2 cybersecurity troubleshooting.
* Working knowledge of cybersecurity attack techniques, network-security concepts, endpoint security, event analysis, and incident-response processes.
* Ability to document investigations, findings, actions, and conclusions clearly and accurately.
* Ability to work effectively within a team-based 24x7 security operations environment.
* U.S. Citizenship required.
* Active Secret security clearance required. Preferred Qualifications * Experience supporting a Department of Defense or Federal Security Operations Center.
* Experience working in a 24x7 SOC or Cybersecurity Service Provider environment.
* Experience with Security Information and Event Management (SIEM) platforms and enterprise cybersecurity monitoring tools.
* Experience analyzing endpoint, network, identity, user-activity, intrusion-detection, or other cybersecurity telemetry.
* Experience supporting cybersecurity incident response and digital-evidence preservation.
* Experience tuning security alerts, detection logic, or monitoring capabilities to reduce false positives and improve detection quality.
* Experience developing or refining SOC procedures, playbooks, or escalation criteria.
* Experience with cybersecurity mitigation, compliance checking, or security testing.
* Familiarity with Department of Defense cybersecurity requirements and Risk Management Framework processes.
* Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments. If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares. Original Posting: October 9, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $69,550.00 - $125,725.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit . Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at . Securing Your Data Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission . Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws. #Remote

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

Other Jobs To Apply

Earn per Hour: Part-Time Delta Airlines Data Entry Remote Jobs

amazon work from home $15+/ Hour (Sign on Bonus!)!

iOS App Developer (Remote - M/F/D)

Engagement Moderators

Paid Product Tester - Mobile Apps (No Experience)

Regional Account Executive, Specialty Pharmacy Sales - Great Lakes NY

Entry‑Level Virtual Assistant & Data Entry Specialist – Remote, US‑Only Position at Company Confidential

Remote Copy Typing Job – Students Welcome

High‑Paying Remote Virtual Assistant Role for Teens – Flexible Schedule, Competitive Pay, Skill Building, and Career Advancement at Company Confidential

Data Entry - Typist Part-Time - Remote

Remote Teleradiologist – Flexible Evening Shifts (IL License Required)

Freelance Captioner

Amazon Warehouse Clerk – Ocala, FL

Stockperson Cartpusher

Remote Admin Coordinator for HR Outsourcing

Support Specialist, DoorDash for Business: Live Operations

Work From Home

B-CPT-11436 Bilingual Accounts Payable & Bookkeeping Virtual Assistant

Flexible and Rewarding Easy Part Time Work Opportunity

Online Listener (Night Shift) – Work From Home Fresher Job (Part time/Remote)

Virtual Assistant (Part-Time Weekends) - On reputed company reputed company-384 – reputed company Store

UPS Data Entry Clerk (Entry Level/No Experience)

Remote Data Entry Jobs Night Shift

Online Personal Stylist for Fashion Resale

2020 Non Phone Work From Home At ABC Company ( Work At Home )

Executive Housekeeper

Remote Entry Level Data Entry Jobs - Work Online

Remote Registered Nurse (Remote Patient Monitoring & Chronic Care Management)

Workplace Coordinator

Remote Phone Triage RN

General Virtual Assistant – Operations, Bookkeeping & Events

Remote Typing For Teens: Flexible Opportunities At Great Pay

Logistics & Supply Chain Data Analyst

Remote Typing Jobs Flexible Part-Time/Full-Time Positions Available

Amazon Work-From-Home Jobs - Part-Time Positions Available - Apply - Part Time

Amazon Delivery Driver

Tech Help Desk Associate - Fully Remote, No Degree Necessary

Part-Time/ Full Time Data Entry Operator (Remote) – Charlotte, North Carolina

Work From Home Data Entry Operator - No Experience Needed

Field Technical Support

Registered Nurse - Fully Remote | Upto $65/hr

Content Editor & Writer (Remote | $22-$70/hr)

NO EXPERIENCE REMOTE JOBS

Amazon Night Shift Jobs (Remote, Entry Level)

Proofreading and Editing

NO EXPERIENCE REMOTE JOBS

Support Job Remote Office Associate Amazon Work-from-Home Opportunity Job ID- 2712

Entry Level Remote Tester (Easy Work / Part Time / No Experience)

Fully Remote Entry Level Rep

Data Entry Clerk Work From Home - Part-Time Focus Group Participants (Up To $750/Week)