Tier 3 Analyst (Secret clearance)

ShorePoint, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

Insurance premiums covered (85%)

401(k) plan

Continuing education & certification

Job summary

ShorePoint is seeking a Tier 3 Analyst with a Secret clearance to lead investigations in a fast-growing SOC environment in Washington, DC. You will provide advanced support for Tier 2 escalations and respond to complex, high-threat incidents across on-prem and cloud environments.

The role requires expert technical knowledge, strong problem-solving, and the ability to produce clear after-action reports while mentoring junior analysts and shaping SOC SOPs.

Qualifications

• Bachelor’s degree or 3+ additional years of relevant experience.
• 7+ years of relevant experience.
• Advanced proficiency with Splunk and FireEye Endpoint Security (HX).
• Deep understanding of SIEM and EDR technologies regardless of vendor.
• Ability to work rotating shifts and provide on-call support in a 24x7x365 SOC environment.
• Active Secret clearance.

Responsibilities

• Lead investigations of complex incidents escalated from Tier 2 and serve as the shift's technical authority.
• Perform dynamic malware analysis and post-incident root cause reviews.
• Analyze vulnerability data for anomalies and drive remediation.
• Deliver accurate, complete, and timely incident analysis and after-action reports.
• Coach junior analysts and improve SOPs and detections.

Skills

Splunk

FireEye HX

SIEM

EDR

Critical thinking

Education

Bachelor’s degree or 3+ years experience in lieu of degree

Tools

SIEM

EDR

FireEye HX

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking a Tier 3 Analyst (Secret Clearance) with deep expertise supporting the enterprise Security Operations Center (SOC). This role provides advanced support for issues escalated from Tier 2, investigates anomalies in vulnerability data and ensures effective response across both classified and unclassified environments. The Tier 3 Analyst position requires expert technical knowledge, creativity in developing solutions and the ability to address complex problems impacting multiple disciplines. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Lead investigations of complex incidents escalated from Tier 2 and serve as the shift's technical authority.
• Perform dynamic malware analysis and post-incident root cause reviews.
• Analyze vulnerability data (e.g., Department of Homeland Security (DHS) Cyber Hygiene reports) for anomalies and drive bureau remediation.
• Deliver accurate, complete, and timely incident analysis and after-action reports.
• Challenge conclusions, coach junior analysts, and translate lessons learned into improved Standard Operating Procedures (SOPs) and detections.

What you need to know:

• Enterprise incident handling across on-premises and cloud environments.
• Advanced log, packet, and endpoint analysis.
• Incident reporting to federal partners, including the Cybersecurity and Infrastructure Security Agency (CISA), Office of Inspector General (OIG), and law enforcement.

Must have’s:

• Bachelor’s degree or 3+ additional years of relevant experience in lieu of degree.
• 7+ years of relevant experience.
• Advanced proficiency with Splunk and FireEye Endpoint Security (HX), supported by a deep understanding of SIEM and EDR technologies regardless of vendor.
• Demonstrated critical thinking skills to break down complex, ambiguous problems into actionable tasks and determine appropriate courses of action.
• Ability to work rotating shifts and provide on-call support in a 24x7x365 SOC environment.
• Applicants must currently hold and maintain an active Secret clearance.

Beneficial to have:

• One or more of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), or Certified Information Systems Security Professional (CISSP).
• Microsoft Defender and Python scripting experience.

Where it’s done:

• Onsite (Washington, DC).