{"id":3198032,"url":"https://alion.io/job/amentum-soc-incident-response-analyst","title":"SOC / Incident Response Analyst","company":{"id":14861,"name":"Amentum","domain":"amentum.com","url":"https://alion.io/company/amentum","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":22,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":84000,"max_usd":160000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-07-07T00:00:00Z","employer_posted_date":"2026-07-07","last_verified_at":"2026-10-24T21:05:38Z","board_verified":true,"closed_at":null,"days_open":109,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":109},"description":"Purpose and Impact:\nAmentum is seeking SOC / Incident Response Analyst to support our U.S. Department of Energy contract. Positions will be based in the Washington, D.C area.\nWork Schedule: 5 days, 8hrs\nEssential Responsibilities:\nProvide a wide range of Cyber Intelligence (CI) services to deliver timely, actionable, and relevant threat intelligence on hostile nation-states, cyber adversaries, and criminals seeking to conduct malicious cyber activities against U.S. energy sector partners.\nMinimum Requirements (Knowledge, Skills, and Abilities):\n3-8+ years supporting Security Operations Centers or Incident Response teams.\nExperience with SIEM platforms, EDR tools, threat hunting, malware analysis, and digital forensics.\nKnowledge of MITRE ATT&CK, NIST Cybersecurity Framework, and cyber kill chain methodologies.\nSecurity+, GCIH, GCFA, GCFE, or equivalent certifications preferred.\nSecurity Clearance Required:\nActive TS/SCI or DOE Q\nThis position is not designated as a safety sensitive position.\nAs part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government.\nOther Responsibilities:\nSafety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.\nQuality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.\nProcedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.","description_format":"text","description_chars":2854,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Military Logistics","Business Process Outsourcing (BPO)","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-24T05:55:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":122500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.104,"p_room":0.28,"age_days":109,"expected_fill_days":7,"reasons":["conf:0","stale_co","win:tail","crowd:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/amentum-soc-incident-response-analyst","json_url":"https://alion.io/job/amentum-soc-incident-response-analyst.json","meta":{"generated_at":"2026-10-24T22:52:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14861},"rest":"https://alion.io/mcp/rest/get_company?id=14861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famentum-soc-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famentum-soc-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famentum-soc-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amentum-soc-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famentum-soc-incident-response-analyst"}]}