Job description

Description Tier 3 Cybersecurity Analyst Location: Rockville, MD Position Overview The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems. Salary $130k-170K Clearance: TS/ DOE Q Key Responsibilities • Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents. • Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies. • Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis. • Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns. • Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities. • Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency. • Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics. • Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies. • Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities. • Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations. • Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations. • Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems. Required Qualifications • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field. • Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security. • Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics. • Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources. • Experience providing technical guidance and mentorship to cybersecurity personnel. • Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations. • Demonstrated experience with information security, information risk management, and information systems risk assessment. ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 25+ years of stellar past performance, ActioNet is the premier Trusted Innogrator ! Core Capabilities: • Advanced and Managed IT Services • Agile Software Development • DevSecOps • Cybersecurity • Health IT • C4ISR & SIGINT • Data Center Engineering & Operations • Engineering & Installation Why ActioNet? At ActioNet, our Passion for Quality is at the heart of everything we do: • Commitment to Employees : We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters. • Commitment to Customers : We are committed to our customers by driving and sustaining Service Delivery Excellence. • Commitment to Community : We are committed to giving back to our community, helping others, and making the world a better place for our next generation. ActioNet is proud to be named a Top Workplace for the eleventh year in a row (2014 - 2024). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation. What's in It For You? As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference? ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program: • Medical Insurance • Vision Insurance • Dental Insurance • Life and AD&D Insurance • 401(k) Savings Plan • Education and Professional Training • Flexible Spending Accounts (FSA) • Employee Referral and Merit Recognition Programs • Employee Assistance and Identity Theft Protection • Paid Holidays: 11 per year • Paid Time Off (PTO) • Disability Insurance ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. ********Direct Applicants, only. No Agencies, No third-party recruiters, please********

Requirements

Must-haves

Tier 3 Cybersecurity Analyst
Location: Rockville, MD
Position Overview
Salary $130k-170K
Clearance: TS/ DOE Q
Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities.
Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
Experience providing technical guidance and mentorship to cybersecurity personnel.
Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
Demonstrated experience with information security, information risk management, and information systems risk assessment.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agile

Platform: jobvite
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off