McKinney, TX

Salary
—
Posted
Aug 11, 2026
Location
McKinney, TX
Last confirmed open
Sep 24, 2026

What this job asks for AI summary

A mid-level SOC Analyst (Tier 2) role within a government-focused managed security practice, responsible for investigating escalated alerts, leading incident response and containment, conducting threat hunting, and mentoring Tier 1 analysts. The position operates in federal and Defense Industrial Base (DIB) client environments and carries specific compliance obligations under DFARS, CMMC Level 2, and NIST SP 800-171, requiring U.S. citizenship and the ability to pass a background investigation.

Mid level · 2+ years · Full-time

Must have (3)
SIEM or EDRMITRE ATT&CKCompTIA CySA+ or Giac Gcih
Nice to have (4)
PowerShell or PythonGCC High or Azure GovernmentGIAC GCFACMMC, FedRAMP or Nist 800 171

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
SIEM55%EDR40%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,021 (middle half $99,961–$167,095).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 13, 2026. It is a model, not a headcount.

Why we read it this way (8)

The posting requires CompTIA CySA+ and/or GIAC GCIH as a hard gate — candidates who do not hold them at hire must obtain one within 6 months as a condition of continued assignment. Both are listed as interchangeable alternatives for the same certification requirement.

GIAC GCFA is explicitly labeled 'preferred' in the certifications section, so it is marked as preferred.

PowerShell and Python appear together under 'Preferred Qualifications' as scripting/automation options and are treated as interchangeable preferred skills.

CMMC, FedRAMP, and NIST 800-171/800-53 experience is listed under Preferred Qualifications; CMMC is used as the primary name with the others as alternatives.

GCC High and Azure Government appear under Preferred Qualifications as equivalent government cloud constructs.

No compensation figures are provided in the posting.

The role operates on a 24/7 rotating shift schedule including nights, weekends, and holidays.

Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): log analysis, network traffic analysis.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗