---
title: 'SOC Analyst at Hatch IT'
canonical: 'https://feeny.ai/job/soc-analyst-hatch-it-washington-bfxxd3zp2n1t'
type: 'job'
last_seen: '2026-09-10'
---

# SOC Analyst at Hatch IT

- **Company:** Hatch IT
- **Location:** Washington, DC
- **Compensation:** $100k–$120k
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-08-19
- **Last confirmed live:** 2026-09-10
- **Apply:** https://jobs.lever.co/hatchit/9c8b397e-d943-4c75-98c7-02733931fb62

## Job description

hatch I.T. is partnering with Expression to find an SOC Analyst. See details below: About The Role: Expression is seeking an SOC Analyst to join their team in support of the National Telecommunications and Information Administration (NTIA) ISCOM Division. In this role, you will provide cyber threat monitoring, analysis, and incident response support that strengthens program situational awareness and ensures resilience of critical federal networks. You will support Tier 1 and Tier 2 SOC operations, contribute to SOC playbook development, and help mature cyber defense strategies in a mission-focused environment. Location and Clearance Washington, DC – Onsite Active Secret or Top Secret clearance required (U.S. Citizenship required) About the Company: Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community. Expression’s “Perpetual Innovation” culture focuses on creating immediate and sustainable value for their clients via agile delivery of tailored solutions built through constant engagement with their clients. Expression was ranked #1 on the Washington Technology 2018's Fast 50 list of fastest growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.

Responsibilities:

- Monitor, detect, and analyze security threats, risks, and alerts using SOC tools, and initiate escalation as required.
- Conduct cyber threat analysis and contribute to reports for program situational awareness.
- Provide Tier 1 response to security incidents and support escalation to Tier 2 during high-volume or critical events.
- Conduct functional incident response teams during shifts, ensuring accountability and effective resolution.
- Conduct malware analysis (static and dynamic) and assess Indicators of Compromise (IOCs).
- Perform network forensics and deep packet inspection to investigate intrusions.
- Implement remediation strategies and support recovery activities after incidents.
- Recommend process improvements and create new detection content to strengthen SOC operations.
- Conduct proactive monthly threat hunts and provide reports to stakeholders.
- Collaborate with cyber teams for incident escalation, coordinated responses, and SOC policy/procedure development.

Qualifications:

- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field; OR equivalent certifications (CompTIA Security+, CISSP, GCIH, GCIA).
- Minimum of 4 years of experience in security operations, incident response, or cyber threat analysis.
- Strong knowledge of SOC operations, incident detection, and response workflows.
- Familiarity with malware analysis, network forensics, and packet-level inspection.
- Excellent analytical, problem-solving, and communication skills.

Preferred Qualifications:

- Advanced certifications such as CISSP, GCFA, GCIH, GCIA, or equivalent.
- Prior experience supporting NTIA, Department of Commerce, or other federal civilian agencies.
- Hands-on experience with SIEM platforms, IDS/IPS, and endpoint monitoring tools.
- Familiarity with the NIST Cybersecurity Framework and Risk Management Framework (RMF).
- Experience developing and maturing SOC playbooks, processes, and detection capabilities.

## About Hatch IT

## Company Overview
- **One-liner**: Hatch I.T. is a specialized tech recruiting partner that connects mission-driven startups with engineering, data, and product talent through flexible hiring models.
- **Entity Type**: Private (Bootstrapped)
- **Headquarters**: Tysons, Virginia, United States
- **Founded**: 2012
- **Founders**: Tim Winkler (Founder & CEO)

## Core Business
- Primary industry: Staffing and Recruiting, with a focus on technology roles for startups in defense, healthcare, AI, cybersecurity, and space.
- Target customers: B2B – early-stage and high-growth startups, especially those with a national security, healthcare, or dual-use mission.
- Mission or purpose statement: "Where talent meets mission" – connecting companies with skilled talent who are deeply aligned with the company’s mission and values.

## Products & Services
- **RPO / Embedded Recruiting**: Dedicated recruiters embedded in the client’s culture, managing full-cycle hiring from sourcing to onboarding.
- **Contingency Hiring**: Pay-only-when-you-hire model for hard-to-fill roles.
- **Contract-to-Hire**: Evaluate talent on the job before committing to a full-time hire.
- **Executive Search**: Finding leadership for mission-driven startups.
- **Scale**: Technical consulting and recruiting services for high-growth startups.
- **Stride**: Technical strategy and consulting for early-stage startups.
- **hatchpad**: An online community platform for startup technologists to network, learn, and advance their careers.

## Market Standing
- **Valuation**: Not publicly available (no disclosed funding rounds).
- **Key Metric**: 20 employees (down 12% YoY); 94% 1-year retention rate; 28 days average time to hire.
- **Notable Investors/Partners**: No external investors identified. Partners include startups across defense, healthcare, and cyber sectors.
- **Growth Signals**: Active hiring for 5+ roles (Senior Data Engineer, Senior Software Engineer, etc.) with a 25% monthly increase in job postings; expanding remote/hybrid options; offices in the US and distributed team across 6 countries.

## Competitive Advantages
- Specialized focus on mission-driven startups (defense, national security, healthcare, AI) – a niche that traditional staffing firms often overlook.
- Flexible pricing and engagement models (contingency, contract-to-hire, RPO) tailored to startup budgets.
- High retention rates (94%) and fast hiring cycles (28 days) demonstrate effective matching.
- Proprietary community (hatchpad) and content (The Hatch Pad newsletter) to attract and engage technologists.

## Strategic Focus
- Deepen partnerships within defense, healthcare, AI, and cybersecurity verticals.
- Scale the hatchpad community to become a go-to resource for startup technologists.
- Maintain a distributed remote/hybrid workforce to access talent globally while supporting clients primarily in the Washington D.C. metro area.

## Why Work Here
- **Culture**: Emphasis on mission alignment, relational (not transactional) approach, and collaborative small-team environment.
- **Work Policy**: Hybrid and remote roles available depending on position; some on-site roles in Washington, DC, Arlington, VA, Reston, VA, and Somerville, MA.
- **Perks & Engineering Culture**: Not extensively documented, but employee reviews on LinkedIn rate Work-Life, Compensation, and Culture all at 5.0/5.0 (3 reviews). The company invests in professional community through hatchpad.
- **Team**: Small (20–25 employees), with a high proportion of HR and recruiting specialists. Distributed across the US, South Africa, Canada, Romania, Bangladesh, and the Philippines.

## Sources
1. [hatchit.io](https://www.hatchit.io/)
2. [LinkedIn - hatch I.T.](https://www.linkedin.com/company/hatch-it)
3. [Built In - hatch I.T.](https://builtin.com/company/hatch-it)
4. [Lever careers page - Hatch IT](https://jobs.lever.co/hatchit)
5. [The Org - hatch IT](https://theorg.com/org/hatch-it)

## Other roles at Hatch IT

- [Sr. Account Executive](https://feeny.ai/job/sr-account-executive-hatch-it-australian-capital-territory-4a8fb6ryqaq1) — Australian Capital Territory
- [Test Engineer (DEA)](https://feeny.ai/job/test-engineer-dea-hatch-it-arlington-vnycf13r0fsx) — Arlington, VA
- [Data Engineer (DEA)](https://feeny.ai/job/data-engineer-dea-hatch-it-arlington-m3bbdfcrsgsq) — Arlington, VA
- [Junior Data Engineer (DEA)](https://feeny.ai/job/junior-data-engineer-dea-hatch-it-arlington-1n3x009qbb53) — Arlington, VA
- [Senior UX Designer](https://feeny.ai/job/senior-ux-designer-hatch-it-reston-va-or-somerville-sh62gsp78rva) — Reston VA OR Somerville, MA
- [Sr. Full Stack Developer](https://feeny.ai/job/sr-full-stack-developer-hatch-it-washington-25eyq6wmwbw2) — Washington, DC
- [Full Stack Developer](https://feeny.ai/job/full-stack-developer-hatch-it-washington-w74m01wjmhea) — Washington, DC
- [Sr. DevSecOps](https://feeny.ai/job/sr-devsecops-hatch-it-washington-5v1htt7xaqh5) — Washington, DC
- [Database Administrator](https://feeny.ai/job/database-administrator-hatch-it-washington-tqg0tfsaqdh2) — Washington, DC
- [Data Platform Architect](https://feeny.ai/job/data-platform-architect-hatch-it-falls-church-tht2rpa89r21) — Falls Church, VA