Senior SOC Business Analyst
Title
Senior SOC Business Analyst
ID
10000271
Department
Information Technology
Senior SOC Business Analyst
Brief Description:
Our organization is actively seeking a highly motivated Senior Security Operations Center (SOC) Business Analyst to join our team!
We partner with the US national defense community to create fully integrated, resilient, and innovative digital solutions that enable them to make smart decisions in real-time. We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal? To enhance our nation's ability to identify, address, and act – no matter what challenges arise.
Clearance Required: Active TS/SCI
Location: Local remote with up to 40% travel within the National Capitol Region (NCR)
Description:
The Senior Business Analyst reports directly to the SOC Program Manager and leads requirements elicitation for a Security Operations Center (SOC). The role turns mission needs, threat realities, and compliance mandates into a validated, traceable requirements baseline that architects, engineers, and analyst staff can build and operate against.
Essential Duties:
- Bridges between the SOC Program Lead, who owns mission outcomes, and the SOC Technical Architect, who owns the technical design, making sure that what the program commits to and what the architecture delivers trace to the same validated requirements.
- Presents prioritized requirements and trade-offs so the Program Lead can make scope, cost, and schedule decisions.
- Escalates unresolved stakeholder conflicts, requirement risks, and dependencies with recommended courses of action.
- Prepares requirements content for leadership briefings, governance boards, and acquisition documents.
- Collaborates with the SOC Technical Architect early so requirements reflect technical realities, such as classification boundaries, cross-domain needs, and existing enterprise systems.
- Validates that each requirement is feasible, unambiguous, and testable before it is baselined.
- Assesses the impact of proposed design and requirement changes
- Holds a regular joint working session to review requirements status, open issues, and design decisions.
- Identifies and maps stakeholders across mission owners, SOC operators, intelligence partners, IT operations, legal, privacy, and acquisition.
- Plans and facilitates interviews, workshops, and site visits to capture current-state pain points and future-state needs.
- Elicits requirements for core SOC functions: 24x7 monitoring, threat detection, incident response, threat intelligence, threat hunting, and vulnerability management.
- Documents current-state (as-is) and target-state (to-be) SOC processes, workflows, and escalation paths, and run gap analysis between them.
- Writes business, functional, non-functional, security, and interface requirements in clear, testable language.
- Develops concept of operations (CONOPS) inputs, use cases, user stories, operational scenarios, and SOC playbook requirements.
- Defines requirements for tooling categories such as SIEM, SOAR, EDR/XDR, NDR, log management, case management, and threat intelligence platforms, without bias toward any vendor.
- Builds and maintains a requirements traceability matrix (RTM) linking each requirement to its source, design element, and verification method
Qualifications:
- Bachelor's degree in information systems, cybersecurity, computer science, business, or a related field;
- 12+ years of business or systems analysis experience, with 5+ years in federal, DoD, or Intelligence Community environments.
- CySA+, GCIA, GCIH, or CISSP required.
Get on board!
We are a progressive IT solutions provider. We offer excellent salaries and benefits in a fun and energized work environment. We are committed to rewarding goal-oriented professionals who enjoy meeting challenges head-on.
All employment opportunities are made without regard to age, race, creed, color, religion, sex national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status or any other basis protected by law.

