Tier 3 Cybersecurity Analyst

About the role

Location: Rockville, MD. The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems. Clearance: TS/ DOE Q.

Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
• Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
• Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
• Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
• Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
• Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
• Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
• Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities.
• Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
• Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
• Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
• Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
• Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
• Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
• Experience providing technical guidance and mentorship to cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
• Demonstrated experience with information security, information risk management, and information systems risk assessment.

Benefits

• Medical Insurance
• Vision Insurance
• Dental Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance

Pay

Salary $130k-170K