Demo

SOC Analyst

Expression
Washington, DC Full Time
POSTED ON 1/23/2026 CLOSED ON 3/27/2026

What are the responsibilities and job description for the SOC Analyst position at Expression?

SOC Analyst

Expression is seeking a SOC Analyst to join our team in support of the National Telecommunications and Information Administration (NTIA) ISCOM Division. In this role, you will provide cyber threat monitoring, analysis, and incident response support that strengthens program situational awareness and ensures resilience of critical federal networks. You will support Tier 1 and Tier 2 SOC operations, contribute to SOC playbook development, and help mature cyber defense strategies in a mission-focused environment.

Location and Clearance

  • Washington, DC – Onsite
  • Active Secret or Top Secret clearance required (U.S. Citizenship required)

Responsibilities

  • Monitor, detect, and analyze security threats, risks, and alerts using SOC tools, and initiate escalation as required.
  • Conduct cyber threat analysis and contribute to reports for program situational awareness.
  • Provide Tier 1 response to security incidents and support escalation to Tier 2 during high-volume or critical events.
  • Conduct functional incident response teams during shifts, ensuring accountability and effective resolution.
  • Conduct malware analysis (static and dynamic) and assess Indicators of Compromise (IOCs).
  • Perform network forensics and deep packet inspection to investigate intrusions.
  • Implement remediation strategies and support recovery activities after incidents.
  • Recommend process improvements and create new detection content to strengthen SOC operations.
  • Conduct proactive monthly threat hunts and provide reports to stakeholders.
  • Collaborate with cyber teams for incident escalation, coordinated responses, and SOC policy/procedure development.

Qualifications

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field; OR equivalent certifications (CompTIA Security , CISSP, GCIH, GCIA).
  • Minimum of 4 years of experience in security operations, incident response, or cyber threat analysis.
  • Strong knowledge of SOC operations, incident detection, and response workflows.
  • Familiarity with malware analysis, network forensics, and packet-level inspection.
  • Excellent analytical, problem-solving, and communication skills.

Preferred Experience

  • Advanced certifications such as CISSP, GCFA, GCIH, GCIA, or equivalent.
  • Prior experience supporting NTIA, Department of Commerce, or other federal civilian agencies.
  • Hands-on experience with SIEM platforms, IDS/IPS, and endpoint monitoring tools.
  • Familiarity with the NIST Cybersecurity Framework and Risk Management Framework (RMF).
  • Experience developing and maturing SOC playbooks, processes, and detection capabilities.

Benefits

Expression offers highly competitive salaries, performance-based incentives, and additional benefits, such as:

  • 401k matching
  • PPO and HDHP medical/dental/vision insurance
  • Education reimbursement up to $10,000/yr
  • Complimentary life insurance
  • Generous rollover PTO and 11 days of holiday leave
  • Onsite gym facility at our HQ office in Washington DC
  • Commuter Benefits Plan
  • In-office Cold Brew Coffee

About Expression

Founded in 1997 and headquartered in Washington, DC, Expression provides data fusion, data analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community.

Our culture emphasizes creating immediate and sustainable value for our clients through agile delivery of tailored solutions and constant engagement. We were ranked #1 on the Washington Technology Fast 50 list of fastest-growing small business Government contractors and recognized as a Top 20 Big Data Solutions Provider by CIO Review.

At Expression, we ensure every team member has the tools and opportunities to grow while working with the newest technologies in the industry. We celebrate milestones, accomplishments, promotions, and collaborative achievements that make our workplace engaging and rewarding.

Equal Employment Opportunity Statement

Expression is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Salary : $100,000 - $120,000

If your compensation planning software is too rigid to deploy winning incentive strategies, it’s time to find an adaptable solution. Compensation Planning
Enhance your organization's compensation strategy with salary data sets that HR and team managers can use to pay your staff right. Surveys & Data Sets
This job has expired.
Employees: Get a Salary Increase
View Core, Job Family, and Industry Job Skills and Competency Data for more than 15,000 Job Titles Skills Library

Job openings at Expression

  • Expression Washington, DC
  • Expression is seeking a highly skilled and experienced Full Stack Developer to join our team. The ideal candidate should be proficient in both, front-end a... more
  • Just Posted

  • Expression Washington, DC
  • Overview: We are seeking a Senior DevOps Engineer to support the modernization of Data Systems with a primary focus on DevSecOps in Azure Cloud. This role ... more
  • Just Posted

  • Expression Washington, DC
  • Overview: We are seeking a Senior DevOps Engineer to support the modernization of Data Systems with a primary focus on DevSecOps in Azure Cloud. This role ... more
  • 3 Days Ago

  • Expression Washington, DC
  • Expression is seeking a Tester Engineer to support the Drug Enforcement Administration (DEA) Investigative Case and Data Ecosystem (ICDE) modernization eff... more
  • 6 Days Ago


Not the job you're looking for? Here are some other SOC Analyst jobs in the Washington, DC area that may be a better fit.

  • Hatch IT Washington, DC
  • hatch I.T. is partnering with Expression to find an SOC Analyst . See details below: About The Role: Expression is seeking an SOC Analyst to join their tea... more
  • 12 Days Ago

  • Accenture Federal Services Washington, DC
  • At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. O... more
  • 2 Months Ago

AI Assistant is available now!

Feel free to start your new journey!