Description
Tier 3 Cybersecurity Analyst
Location: Rockville, MD
Position Overview
The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems.
Salary $130k-170K
Key Responsibilities
• Lead advanced incident detection, response, and escalation support for high-severity cyber events.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, and threat intelligence.
• Conduct deep-dive forensic investigations, including host, network, and malware analysis.
• Correlate data across SIEM, endpoint, network, cloud, and threat intel sources to identify attack patterns.
• Develop and refine detection rules, analytics, and SIEM use cases to improve alert fidelity.
• Provide technical mentorship and guidance to Tier 1 and Tier 2 analysts.
• Integrate cyber threat intelligence with operational analysis, including nation-state and advanced persistent threat (APT) activity.
• Support M-21-31 logging maturity initiatives, including log validation, correlation, and visibility improvements.
• Contribute to automation and detection engineering efforts (scripts, playbooks, orchestration).
• Collaborate with federal stakeholders (e.g., CISA, US-CERT) during major incidents.
Required Qualifications
• Bachelor’s degree in cybersecurity, IT, or related field.
• 8+ years of experience in incident response, threat hunting, malware analysis, or cyber forensics.
• Deep expertise in:
• SIEM platforms and log analysis
• Network traffic and packet analysis
• Intrusion detection/prevention systems
• Malware analysis (static/dynamic)
• Experience with threat intelligence integration and analysis.
• Strong knowledge of NIST, FISMA, EO 14028, and M-21-31 logging requirements.
Key Competencies
• Analytical depth and critical thinking
• Advanced cyber threat detection
• Mentorship and technical leadership
• Cross-domain data correlatio