SOC Tier 3 Analyst

Global Alliant Inc; Glen Burnie (MD); Híbrido; USD 120.000 - 160.000; Jornada completa

Descripción de la vacante

Global Alliant Inc. is seeking a SOC Tier 3 Analyst in Crownsville, MD for a hybrid, full-time role. You will lead forensic investigations, perform malware and tool analysis, and develop SOC processes while mentoring Tier 1–2 analysts.

The position requires a Bachelor's degree in a technical field and 10+ years in cybersecurity, with potential on-call duties. Collaboration with senior management and adherence to security standards are essential.

Formación

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical discipline.
• 10+ years of relevant cybersecurity, digital forensics, or incident response experience.

Responsabilidades

• Plan, initiate, and conduct forensic investigations on compromised systems and report findings.
• Analyze malware and attacker tools; identify payloads and techniques.
• Develop and tune SOC detection rules; train Tier 1–2 analysts.
• Correlate security events and perform threat hunting to identify advanced threats.
• Lead incident response procedures and ensure adherence to standards.
• Provide on-call support as needed outside regular hours.

Conocimientos

Forensic tools

Malware analysis

Network traffic analysis

Threat intelligence gathering

Educación

Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical/scientific discipline

Herramientas

Sentinel

Descripción del empleo

Job Title: SOC Tier 3 Analyst

Location: Crownsville, MD – Local Candidates Only

Employment Type: Full-Time

Work Arrangement: Hybrid

Criteria- Candidates should possess US Citizenship, reside in US and be willing to go through the federal background check due to the nature of the client.

Summary of Key Responsibilities

• Incident Response & Forensics: Plan, initiate, and conduct forensic investigations on compromised systems; perform root cause and scope-of-impact analysis; create detailed forensic reports.
• Malware & Tool Analysis: Support malware analysis of attacker tools and techniques; identify and analyze malicious payloads.
• Tool & Process Development: Train SOC analysts on SIEM tools (e.g., Sentinel), develop and tune detection rules, and assist in creating new SOC monitoring processes.
• Threat Intelligence & Hunting: Correlate actionable security events, review threat data, develop custom detection signatures, and conduct threat hunting to identify advanced threats.
• Technical Leadership: Contribute to technical briefings, develop incident response procedures, and ensure adherence to operational and technical standards.
• On-Call Support: May require availability outside regular hours or on weekends to respond to critical incidents.

Additional Job Description

• Assists with the development of Security Operation Center (SOC) tiered monitoring and escalation processes.
• Provides support for SOC Analyst Tier 1 & 2 personnel.
• Provides technical expertise in the development of existing Cybersecurity projects and initiatives to include but not limited to: End Point Protection and Response, Vulnerability Management, Security Operations Expansion.
• Provides technical expertise & support in Cybersecurity monitoring and analysis tool engineering and implementation.
• Reviews, evaluates, and triages security alerts in Sentinel using dashboards, reports, and custom queries.
• Uses tools, such as captured network traffic, intrusion detection software and Sentinel instrumentation to investigate possible cyber incidents.
• Other security program development, documentation, security monitoring, threat hunting, vulnerability management, technical and risk assessment, and security engineering duties assigned by OSM SOC and senior management.

Required Qualifications

Education:

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical/scientific discipline.

Experience:

• 10+ years of relevant experience in cybersecurity, digital forensics, or incident response.

Skills:

• Proficiency with forensic tools.
• SIEM platforms (Sentinel).
• Malware analysis.
• Network traffic analysis.
• Threat intelligence gathering.

Certifications:

• GREM, CEH, CHFI, GCFE, GIAC, or similar cybersecurity/forensics credentials are preferred.

Additional Requirements

• Hybrid position – Must be able to work at the Crownsville office 2–3 times a week or rotation schedule with other Tier 3 Analysts.
• Strong leadership and communication skills.