Cybersecurity Advanced Analytics Specialist

mysitec; Springfield (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

mysitec is seeking an Advanced Cybersecurity Analytics Specialist to strengthen enterprise defenses by analyzing threat activity, improving detection logic, and validating countermeasures. The role involves cross-team collaboration to identify risks, reduce false positives, and support incident response.

The candidate will analyze data, develop SIEM queries, and tune detection. Strong network protocol knowledge and regex skills are essential, with DoD 8140/8570 IAT III and CSSP Analyst

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• Eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

TS/SCI clearance

Cybersecurity analytics

SIEM query development

Data mining

Detection tuning

Network protocols knowledge

Regular expressions

Python/Bash/PowerShell scripting

Education

DoD 8140/8570 IAT Level III & CSSP Analyst certification

Tools

SIEM tools

Hex editors

Static file analysis tools

Job description

Advanced Cybersecurity Analytics Specialist

Clearance: Active TS/SCI
Experience: 8+ years

Help strengthen enterprise cyber defenses by analyzing threat activity, improving detection logic, and validating defensive countermeasures. You will work across cybersecurity teams to identify emerging risks, reduce false positives, and support incident response.

What You Will Do

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

What You Bring

• Active TS/SCI clearance and U.S. citizenship.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Preferred Qualifications

• Python, Bash, or PowerShell scripting.
• Purple team experience.
• Cloud security, data lake, or large-scale security analytics experience.
• Experience with hex editors or static file analysis.