Hybrid SOC Tier 3 Analyst - Incident Response Lead

Global Alliant Inc; Crownsville (MD); Hybrid; USD 130,000 - 190,000; Full time

Job summary

Global Alliant Inc in Crownsville, MD is seeking a SOC Tier 3 Analyst to lead incident response, forensics, and threat hunting across federal-regulated environments. You will coordinate with Tier 1/2 teams, tune SIEM rules, and drive security monitoring improvements.

This hybrid, full-time role requires US citizenship and on-site presence 2–3 days weekly; hybrid schedule, strong leadership, and experience with Sentinel and forensic tools are essential.

Qualifications

• Bachelor's degree in a related technical field.
• 10+ years of cybersecurity/forensics/IR experience.
• Certifications such as GREM/CEH/CHFI/GCFE are preferred.

Responsibilities

• Lead incident response and forensic investigations on compromised systems.
• Analyze malware and attacker tools; develop detection signatures.
• Tune SIEM rules and dashboards; train SOC analysts.
• Conduct threat hunting and threat intelligence reviews to identify advanced threats.
• Provide technical leadership and develop IR procedures.

Skills

Forensic tools

Sentinel SIEM

Malware analysis

Network traffic analysis

Threat intelligence gathering

Education

Bachelor's degree in Computer Science, Information Systems, Engineering

Tools

Sentinel

Forensic software

Job description

Global Alliant Inc in Crownsville, MD is seeking a SOC Tier 3 Analyst to lead incident response, forensics, and threat hunting across federal-regulated environments. You will coordinate with Tier 1/2 teams, tune SIEM rules, and drive security monitoring improvements.

This hybrid, full-time role requires US citizenship and on-site presence 2–3 days weekly; hybrid schedule, strong leadership, and experience with Sentinel and forensic tools are essential.