Senior Cybersecurity Analytics Specialist - SIEM & Threats

Si Tec Consulting; Springfield (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Si Tec Consulting is seeking an Advanced Cybersecurity Analytics Specialist to strengthen enterprise defenses by analyzing threat activity, improving detection logic, and validating countermeasures. You will collaborate across cybersecurity teams to identify risks, reduce false positives, and support incident response while applying DoD 8140/8570 IAT Level III and CSSP Analyst compliant practices.

In this role you will analyze network data, tune SIEM queries, and work with incident response

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• Eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

Active TS/SCI clearance

U.S. citizenship

SIEM query development

Data mining

Detection tuning

Network protocol knowledge

Regular expressions

Python scripting

Bash scripting

Purple team experience

Cloud security

Data lake experience

Tools

SIEM

Job description

Si Tec Consulting is seeking an Advanced Cybersecurity Analytics Specialist to strengthen enterprise defenses by analyzing threat activity, improving detection logic, and validating countermeasures. You will collaborate across cybersecurity teams to identify risks, reduce false positives, and support incident response while applying DoD 8140/8570 IAT Level III and CSSP Analyst compliant practices.

In this role you will analyze network data, tune SIEM queries, and work with incident response