On-Site Threat Ops Analyst (TS/SCI) – Fort Meade

Trinity Cyber Inc.; Washington, Baltimore (District of Columbia, MD); On-site; USD 150,000 - 210,000; Full time

Job summary

Trinity Cyber Inc. is seeking an on-site Resident Threat Operations Analyst for a major government customer in the Washington, DC area.

You will serve as the embedded technical authority for Full Content Inspection (FCI) technology, advising cyber operations teams and translating mission requirements into capabilities delivered by Trinity Cyber. The role requires an active TS/SCI clearance and deep expertise in threat intelligence, network traffic analysis, and detection engineering.

Qualifications

• Active TS/SCI clearance required.
• Local to the Washington DC metro area and on-site at the customer location.
• Experience as SOC analyst, threat hunter, incident responder, or similar cyber operations role.
• Hands-on experience developing, tuning, validating, or operationalizing network detection technology in production environments.
• Experience in classified government environments.
• Ability to rapidly learn complex cybersecurity technologies and become the trusted technical authority.

Responsibilities

• Translate customer threat intel into FCI countermeasure recommendations for Trinity Cyber engineering teams.
• Study adversary TTPs and analyze network traffic and PCAPs at protocol level to find detection opportunities.
• Advise on optimal FCI placement, coverage, and blind spots within customer architectures and workflows.
• Communicate findings and requirements to government and Trinity Cyber teams; capture feedback to shape future capabilities.

Skills

Threat intelligence

Threat hunting

Network analysis

PCAP analysis

Incident response

OSINT research

SOC operations

MITRE ATT&CK

Splunk

Protocol analysis

Tools

Wireshark

Suricata

Snort

YARA

Sigma

Job description

Trinity Cyber Inc. is seeking an on-site Resident Threat Operations Analyst for a major government customer in the Washington, DC area.

You will serve as the embedded technical authority for Full Content Inspection (FCI) technology, advising cyber operations teams and translating mission requirements into capabilities delivered by Trinity Cyber. The role requires an active TS/SCI clearance and deep expertise in threat intelligence, network traffic analysis, and detection engineering.