About the RoleApex is looking for a SOC Analyst to monitor, investigate, and respond to security activity across endpoints, identity, cloud services, networks, and mission-support environments. You will spend most of your time working directly with alerts, logs, vulnerabilities, and investigations to determine what happened and what needs to happen next.
Responsibilities
- Monitor and triage security alerts from CrowdStrike, Elastic SIEM, Microsoft Identity, AWS, and Palo Alto.
- Investigate suspicious logins, phishing emails, privilege changes, and unusual network events.
- Escalate incidents based on affected systems, severity, and CUI impact.
- Work with IT, Cybersecurity, and Network teams on security findings involving our systems and infrastructure.
- Document incidents, required resolutions, and potentially affected assets.
- Maintain recurring logging reviews and incident response documentation with the IT team; collect evidence to support vulnerability management and compliance reporting.
Requirements
- Active TS/SCI clearance required at time of hire
- US Citizenship required
- 2 or more years of experience in a SOC, incident response, threat detection, endpoint security, vulnerability management, or another hands-on cybersecurity operations role
- Experience investigating events using EDR, SIEM, identity, cloud, or network telemetry
- Working knowledge of Windows and Linux, authentication, endpoint behavior, networking fundamentals, common attacker techniques, and cloud logging
- Ability to write useful search queries and filters in a SIEM or log-analysis platform and document investigations so another analyst can continue the work
- Understanding of incident triage, scoping, containment, evidence preservation, escalation, vulnerability prioritization, and post-incident remediation
Preferred Qualifications
- Experience with CrowdStrike Falcon, Palo Alto, Tenable, Elastic Security, Microsoft GCC High, Entra ID, AWS security telemetry, or similar tools
- Experience with detection engineering, threat hunting, MITRE ATT&CK, or scripting in Python, PowerShell, or Bash
- Security+, CySA+, GCIH, GCIA, or a comparable security operations certification
-Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
What We Offer For Full-time Employees:- Shared upside: Receive equity in Apex, letting you benefit from the work you create
- Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
- Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
- Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
- 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
- Daily catered lunch and unlimited snacks to keep you fueled throughout the day
- Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
- Your dream desk setup and all the tools you need to be your most productive self
- World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
- Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.
