Senior Cybersecurity Analytics Specialist – TS/SCI

SITEC Consulting, LLC.; Springfield (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

SITEC Consulting, LLC. seeks an Advanced Cybersecurity Analytics Specialist with an active TS/SCI clearance to strengthen enterprise defenses. You will analyze threat activity, refine detection logic, and validate countermeasures across cybersecurity teams.

Responsibilities include developing SIEM queries, tuning detections, and collaborating with incident response during investigations and exercises. This role requires 8+ years of analytics experience and relevant DoD certifications.

Qualifications

• Active TS/SCI clearance and U.S. citizenship are required.
• At least eight years of advanced cybersecurity analytics experience.
• DoD 8140/8570 IAT Level III and CSSP Analyst compliant certifications.
• Experience with SIEM query development, data mining, and detection tuning.
• Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.

Responsibilities

• Analyze network and security data to identify trends, hidden threats, and potential incidents.
• Develop and tune SIEM queries, rules, signatures, and scripts.
• Correlate threat intelligence, incident findings, and system activity to improve detection.
• Partner with incident response and cyber analytics teams during investigations and exercises.
• Evaluate alerts and false positives to improve detection quality.
• Document analysis and contribute to technical briefings.

Skills

TS/SCI clearance

U.S. citizenship

8+ years experience

SIEM tuning

Network protocol knowledge

Education

IAT Level III CSSP Analyst

Tools

Python scripting

Bash scripting

PowerShell scripting

Job description

SITEC Consulting, LLC. seeks an Advanced Cybersecurity Analytics Specialist with an active TS/SCI clearance to strengthen enterprise defenses. You will analyze threat activity, refine detection logic, and validate countermeasures across cybersecurity teams.

Responsibilities include developing SIEM queries, tuning detections, and collaborating with incident response during investigations and exercises. This role requires 8+ years of analytics experience and relevant DoD certifications.