Tier 3 Cybersecurity Analyst
Location: Rockville, MD
Position Overview
The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems.
Salary $130k-170K
Clearance: TS/ DOE Q
Key Responsibilities
- Lead advanced incident detection, response, and escalation support for high-severity cyber events.
- Perform proactive threat hunting using behavioral analytics, SIEM correlation, and threat intelligence.
- Conduct deep-dive forensic investigations, including host, network, and malware analysis.
- Correlate data across SIEM, endpoint, network, cloud, and threat intel sources to identify attack patterns.
- Develop and refine detection rules, analytics, and SIEM use cases to improve alert fidelity.
- Provide technical mentorship and guidance to Tier 1 and Tier 2 analysts.
- Integrate cyber threat intelligence with operational analysis, including nation-state and advanced persistent threat (APT) activity.
- Support M-21-31 logging maturity initiatives, including log validation, correlation, and visibility improvements.
- Contribute to automation and detection engineering efforts (scripts, playbooks, orchestration).
- Collaborate with federal stakeholders (e.g., CISA, US-CERT) during major incidents.
Required Qualifications
- Bachelor’s degree in cybersecurity, IT, or related field.
- 8+ years of experience in incident response, threat hunting, malware analysis, or cyber forensics.
- Deep expertise in:
- SIEM platforms and log analysis
- Network traffic and packet analysis
- Intrusion detection/prevention systems
- Malware analysis (static/dynamic)
- Experience with threat intelligence integration and analysis.
- Strong knowledge of NIST, FISMA, EO 14028, and M-21-31 logging requirements.
Key Competencies
- Analytical depth and critical thinking
- Advanced cyber threat detection
- Mentorship and technical leadership
- Cross-domain data correlatio