Cybersecurity Advanced Analytics Specialist

SITEC Consulting, LLC.; Springfield (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

SITEC Consulting, LLC. seeks an Advanced Cybersecurity Analytics Specialist with an active TS/SCI clearance to strengthen enterprise defenses. You will analyze threat activity, refine detection logic, and validate countermeasures across cybersecurity teams.

Responsibilities include developing SIEM queries, tuning detections, and collaborating with incident response during investigations and exercises. This role requires 8+ years of analytics experience and relevant DoD certifications.

Qualifications

• Active TS/SCI clearance and U.S. citizenship are required.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certifications.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

TS/SCI clearance

U.S. citizenship

8+ years experience

SIEM tuning

Network protocol knowledge

Education

IAT Level III CSSP Analyst

Tools

Python scripting

Bash scripting

PowerShell scripting

Job description

Advanced Cybersecurity Analytics Specialist

Clearance: Active TS/SCI

Experience: 8+ years

Help strengthen enterprise cyber defenses by analyzing threat activity, improving detection logic, and validating defensive countermeasures. You will work across cybersecurity teams to identify emerging risks, reduce false positives, and support incident response.

What You Will Do

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

What You Bring

• Active TS/SCI clearance and U.S. citizenship.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Preferred Qualifications

• Python, Bash, or PowerShell scripting.
• Purple team experience.
• Cloud security, data lake, or large-scale security analytics experience.
• Experience with hex editors or static file analysis.