Cybersecurity Analytics Engineer - SIEM & Threat Detection

Si Tec Consulting; West Springfield (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Si Tec Consulting is seeking an Advanced Cybersecurity Analytics Specialist with an active TS/SCI clearance and 8+ years of analytics experience. You will analyze threats, tune detection logic, and validate countermeasures while collaborating with cross-team experts.

The role requires DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification, strong SIEM and scripting skills, and deep knowledge of network protocols for effective incident response and detection improvement.

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

SIEM query development

Data mining

Detection tuning

Traffic analysis

Regular expressions

Network protocols

Incident response collaboration

Threat analysis

Education

DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification

Tools

Python

Bash

PowerShell

Job description

Si Tec Consulting is seeking an Advanced Cybersecurity Analytics Specialist with an active TS/SCI clearance and 8+ years of analytics experience. You will analyze threats, tune detection logic, and validate countermeasures while collaborating with cross-team experts.

The role requires DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification, strong SIEM and scripting skills, and deep knowledge of network protocols for effective incident response and detection improvement.