Cybersecurity Advanced Analytics Specialist

Si Tec Consulting; West Springfield (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Si Tec Consulting is seeking an Advanced Cybersecurity Analytics Specialist with an active TS/SCI clearance and 8+ years of analytics experience. You will analyze threats, tune detection logic, and validate countermeasures while collaborating with cross-team experts.

The role requires DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification, strong SIEM and scripting skills, and deep knowledge of network protocols for effective incident response and detection improvement.

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

SIEM query development

Data mining

Detection tuning

Traffic analysis

Regular expressions

Network protocols

Incident response collaboration

Threat analysis

Education

DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification

Tools

Python

Bash

PowerShell

Job description

Advanced Cybersecurity Analytics Specialist

Clearance: Active TS/SCI
Experience: 8+ years

Help strengthen enterprise cyber defenses by analyzing threat activity, improving detection logic, and validating defensive countermeasures. You will work across cybersecurity teams to identify emerging risks, reduce false positives, and support incident response.

What You Will Do

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

What You Bring

• Active TS/SCI clearance and U.S. citizenship.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Preferred Qualifications

• Python, Bash, or PowerShell scripting.
• Purple team experience.
• Cloud security, data lake, or large-scale security analytics experience.
• Experience with hex editors or static file analysis.