CIOCC Tier 3 Analyst

PlanIT Group, LLC; Rockville (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

PlanIT Group in Rockville, MD seeks a CIOCC Tier 3 Analyst to analyze and respond to security events from SIEM, FW, IDS/IPS, AV, NAC and other sources in a customer-facing role.

The role requires leadership, mentoring of Tier 1–2 analysts, shift lead responsibilities, and strong written and verbal communication to coordinate across teams.

Candidates must be US citizens and be eligible for the required agency clearance.

Qualifications

• 3-5 years in a security operations center with demonstrated team leadership.
• Proficiency with Windows, Linux or UNIX in a functional capacity.
• Excellent written and verbal communication; able to convey technical details clearly.
• Experience with Splunk or similar SIEM and with CrowdStrike.
• US citizenship required.
• Must be able to obtain and maintain the required agency clearance.

Responsibilities

• Analyze and respond to security events and incidents from SIEM, FW, IDS/IPS, AV, NAC and other client data sources.
• Provide mentoring to Tier 1 & 2 analysts and serve as shift lead (supervising Tier 1s).

Skills

Team leadership

Communication skills

Mentoring

Shift leadership

Customer facing

Tools

Splunk

CrowdStrike

Job description

Job Description

The CIOCC Tier 3 Analyst shall be responsible for the following but not limited to: Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC) and other client data sources. This is a customer facing role, and will require excellent analytic and communication skills, delegation, and shared ownership of team processes. Will also provide mentoring to Tier 1 & 2 analysts and be lead for shift (supervising Tier 1s).

Job Description

The CIOCC Tier 3 Analyst shall be responsible for the following but not limited to: Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC) and other client data sources. This is a customer facing role, and will require excellent analytic and communication skills, delegation, and shared ownership of team processes. Will also provide mentoring to Tier 1 & 2 analysts and be lead for shift (supervising Tier 1s).

Required Experience

• 3-5 years of security operations center environment, including demonstrated team leadership.
• Experience with a variety of operating systems including Windows, Linux or UNIX in a functional capacity
• Excellent written and verbal communication skills required. Must be able to communicate technical details clearly
• Splunk or similar SIEM tool, CrowdStrike
• MUST BE A US CITIZEN
• Must be able to obtain and maintain the required agency clearance

Preferred Experience / Nice To Have Experience

• CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. One or more preferred
• IDS Log analysis skills
• Packet Capture tools and analysis
• Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP)
• Military and/or prior U.S. Government support experience preferred but not required
• This position is target for 2nd shift (12 pm-10 pm)