Cybersecurity Advanced Analytics Specialist

Si Tec Consulting; Springfield (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Si Tec Consulting is seeking an Advanced Cybersecurity Analytics Specialist to strengthen enterprise defenses by analyzing threat activity, improving detection logic, and validating countermeasures. You will collaborate across cybersecurity teams to identify risks, reduce false positives, and support incident response while applying DoD 8140/8570 IAT Level III and CSSP Analyst compliant practices.

In this role you will analyze network data, tune SIEM queries, and work with incident response

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• Eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

Active TS/SCI clearance

U.S. citizenship

SIEM query development

Data mining

Detection tuning

Network protocol knowledge

Regular expressions

Python scripting

Bash scripting

Purple team experience

Cloud security

Data lake experience

Tools

SIEM

Job description

Advanced Cybersecurity Analytics Specialist

Clearance: Active TS/SCI
Experience: 8+ years

Help strengthen enterprise cyber defenses by analyzing threat activity, improving detection logic, and validating defensive countermeasures. You will work across cybersecurity teams to identify emerging risks, reduce false positives, and support incident response.

What You Will Do

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

What You Bring

• Active TS/SCI clearance and U.S. citizenship.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Preferred Qualifications

• Python, Bash, or PowerShell scripting.
• Purple team experience.
• Cloud security, data lake, or large-scale security analytics experience.
• Experience with hex editors or static file analysis.