Tier 3 Cybersecurity Analyst

ActioNet, Inc.; Rockville (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Dental Insurance

Life and AD&D Insurance

401(k) Savings Plan

Education and Professional Training

Flexible Spending Accounts (FSA)

Employee Referral and Merit Programs

Identity Theft Protection

Paid Holidays: 11 per year

Paid Time Off (PTO)

Disability Insurance

Job summary

ActioNet, Inc. is seeking a Tier 3 Cybersecurity Analyst in Rockville, MD to lead advanced threat detection, incident response, and forensic investigations. You will fuse multi-source data, develop detection analytics, and mentor junior analysts within a mature SOC.

The role requires TS/DOE Q clearance and broad experience across cyber defense disciplines, with responsibilities spanning detection, response, and collaboration with federal agencies.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• 8+ years in cybersecurity operations, incident response, malware analysis, forensics, or network security.
• Experience with multiple intelligence and security data sources and guidance to staff.

Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery for high-severity incidents.
• Proactive threat hunting using behavioral analytics and SIEM correlation.
• Conduct comprehensive cyber forensics on host, network, and malware incidents.
• Integrate data from security, intelligence, and operations sources to identify threats.
• Develop detection analytics, SIEM use cases, and SOAR playbooks to improve ops.
• Perform network traffic and log analysis to identify indicators of compromise.
• Support information risk management and risk assessments.
• Assist and mentor Tier 1/2 analysts in threat analysis and IR.

Skills

Threat detection

Incident response

Threat hunting

Forensic analysis

SIEM

Threat intelligence

Mentorship

Education

Bachelor's degree in Cybersecurity/Information Technology/Computer Science

Tools

SIEM

SOAR

IDS/IPS

DLP

ATP

Threat intel platforms

Job description

Position Overview

The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems.

Location: Rockville, MD

Salary $130k-170K

Clearance: TS/ DOE Q

Key Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
• Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
• Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
• Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
• Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
• Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
• Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
• Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities.
• Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
• Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
• Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
• Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
• Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
• Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
• Experience providing technical guidance and mentorship to cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
• Demonstrated experience with information security, information risk management, and information systems risk assessment.

ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 25+ years of stellar past performance, ActioNet is the premier Trusted Innogrator!

Core Capabilities

• Advanced and Managed IT Services
• Agile Software Development
• DevSecOps
• Cybersecurity
• Health IT
• C4ISR & SIGINT
• Data Center Engineering & Operations
• Engineering & Installation

Why ActioNet?

At ActioNet, our Passion for Quality is at the heart of everything we do:

• Commitment to Employees: We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters.
• Commitment to Customers: We are committed to our customers by driving and sustaining Service Delivery Excellence.
• Commitment to Community: We are committed to giving back to our community, helping others, and making the world a better place for our next generation.

ActioNet is proud to be named a Top Workplace for the eleventh year in a row (2014 - 2024). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation.

What's in It For You?

As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?

ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:

• Medical Insurance
• Vision Insurance
• Dental Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance