Tier 3 Cybersecurity Analyst

Description Tier 3

Cybersecurity Analyst Location:

Rockville, MD Position Overview The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems. Salary $130k-170K Key Responsibilities Lead advanced incident detection, response, and escalation support for high-severity cyber events. Perform proactive threat hunting using behavioral analytics, SIEM correlation, and threat intelligence. Conduct deep-dive forensic investigations, including host, network, and malware analysis. Correlate data across SIEM, endpoint, network, cloud, and threat intel sources to identify attack patterns. Develop and refine detection rules, analytics, and SIEM use cases to improve alert fidelity. Provide technical mentorship and guidance to Tier 1 and Tier 2 analysts. Integrate cyber threat intelligence with operational analysis, including nation-state and advanced persistent threat (APT) activity. Support M-21-31 logging maturity initiatives, including log validation, correlation, and visibility improvements. Contribute to automation and detection engineering efforts (scripts, playbooks, orchestration). Collaborate with federal stakeholders (e.g., CISA, US-CERT) during major incidents. Required Qualifications Bachelor's degree in cybersecurity, IT, or related field. 8+ years of experience in incident response, threat hunting, malware analysis, or cyber forensics.

Deep expertise in:

SIEM platforms and log analysis Network traffic and packet analysis Intrusion detection/prevention systems Malware analysis (static/dynamic) Experience with threat intelligence integration and analysis. Strong knowledge of

NIST, FISMA, EO

14028, and M-21-31 logging requirements. Key Competencies Analytical depth and critical thinking Advanced cyber threat detection Mentorship and technical leadership Cross-domain data correlatio