What are the responsibilities and job description for the SOC Analyst (CGC) position at Merlin International Inc?
About Merlin Group
Merlin Group operates at the intersection of cyber innovation, national security, and technology-driven transformation. With a mission to accelerate the adoption of high-impact technologies across the U.S. public sector and regulated commercial markets, Merlin is uniquely structured around three core tenets – Invest, Enable, and Scale – each designed to address a specific stage of the technology lifecycle. Together, our affiliates – Merlin Ventures, CGC, and Merlin Cyber – form a flywheel that builds enduring capability for customers, partners, and the broader cyber ecosystem, operationalizing technological advancement into mission-ready, enterprise-grade solutions.
At Merlin, we believe our strength lies in our people. Team members are encouraged to be creative, collaborative, and nimble, pursuing paths to deliver the cutting-edge cybersecurity solutions that our customers rely on. From next-generation cyber defense to secure cloud and AI, we are united by one purpose – transforming innovation into mission impact.
The Opportunity
We're seeking a SOC Analyst with a strong understanding of security operations and significant experience operating in heavily regulated environments. You will be responsible for continuous monitoring of the CGC environments and will serve as the initial triage for security alerts. Strong understanding of vulnerability management and security frameworks is required.
Primary Duties & Responsibilities
- Manage the continuous monitoring of the CGC platform using a variety of industry-leading and proprietary monitoring and scanning technologies.
- Support all CGC policies and procedures required to achieve and maintain FedRAMP, GovRAMP, and other compliance standards.
- Serve as the initial triage for a team of SOC analysts providing monitoring and incident response.
- Work with the Principal SOC Analyst to develop and maintain analytics to identify MITRE ATT&CK techniques and misalignment with NIST 800-53 requirements.
- Work with the SOC Manager to develop standard operating procedures and identify gaps in detections and preventions with MITRE ATT&CK and NIST 800-53.
- Obtain appropriate certifications (cloud security certifications as an example) for technical and security operations-related professional growth.
Qualifications
- 1 year of experience excelling in a Security Operations Center (SOC), with demonstrable experience with cloud-based workloads, Windows, and Linux security, subject to FedRAMP or similar NIST requirements.
- Experience with these technologies:
- SIEM for reporting and analysis, with deep experience in Splunk
- Endpoint security solutions including TrendMicro or similar
- Infrastructure and database scanning with Tenable or similar
- Cloud Monitoring such as Azure Monitor and AWS Config
- Strong verbal and written communication skills and strong analytical and problem-solving abilities to analyze, organize and translate complex technical concepts into clear and digestible information.
- Ability to work independently or as a member of a team on various tasks and identify goals and tasks that are attainable and appropriate for ensuring CGC’s success.
- Bachelor’s degree or higher from a nationally accredited university in a related field or certifications (i.e. Security , CEH, Microsoft Certified: Azure Fundamentals, AWS Cloud Practitioner)
- Must be a U.S. citizen.
Success Attributes
- Commitment to personal and professional integrity and respect for others.
- Roll-up-your-sleeves attitude and low-ego approach.
- Commitment to teamwork and professional relationship development.
- Passion for lifelong learning, growth, and development.
- Flexible and nimble; comfortable with ambiguity and rapid change.
- Strong communication and functional project management skills.
- Desire to innovate, try new things, and creatively explore novel solutions to business challenges.
- Professional and respectful approach to the diversity of thought, action, identity, and attributes.
Benefits & Perks
We want to empower and inspire employees to be and do their best. Our workdays are dynamic, collegial, and fun. Our office features multiple places to work unconstrained by typical office barriers. Our wellness package provides access to an on-site gym and includes medical, dental, and vision insurance along with options for FSA and EAP. We offer 401(k) with employer match, unlimited PTO, and a culture respectful of the reality that not everything in one’s personal life is guaranteed to happen only after hours.
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.