Tier 3 Cybersecurity Analyst

ActioNet, Inc.; Rockville (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life and AD&D Insurance

401(k) Savings Plan

Education and Professional Training

Flexible Spending Accounts (FSA)

Employee Referral and MeritRecognition

Employee Assistance and Identity Theft

Paid Holidays

PTO

Disability Insurance

Job summary

ActioNet, Inc. seeks a senior Tier 3 Cybersecurity Analyst to lead advanced threat detection, incident response, and forensics within a high-sophistication SOC. You will mentor junior staff, craft detection analytics, and coordinate with federal partners on complex investigations.

The role requires a TS/DOE Q clearance, 8+ years in cybersecurity operations, and a strong background in threat intelligence and analytics. Salary ranges reflect senior level responsibilities.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or related field.
• 8+ years of professional cybersecurity operations experience.
• Experience in network security architecture, incident detection and response, malware analysis, and forensics.
• Experience integrating information from multiple intelligence and security sources.
• Experience guiding and mentoring cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement.

Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery for complex incidents.
• Perform proactive threat hunting using analytics, SIEM, threat intel, and advanced detection methods.
• Conduct cyber forensics across host, network, and malware analysis.
• Analyze data from security, intelligence, and operations sources to identify emerging threats.
• Fuse network analysis with threat intelligence and law enforcement information for investigations.
• Develop detection analytics, SIEM use cases, and SOAR playbooks to improve response.

Skills

Threat hunting

Incident response

Forensics analysis

Threat intelligence

Behavioral analytics

SOAR playbooks

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

SOAR

Job description

The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems.

Salary $130k-170K

Clearance: TS/ DOE Q

Key Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
• Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
• Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
• Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
• Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
• Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
• Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
• Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities.
• Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
• Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
• Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
• Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
• Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
• Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
• Experience providing technical guidance and mentorship to cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
• Demonstrated experience with information security, information risk management, and information systems risk assessment.

ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:

• Medical Insurance
• Vision Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance

ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

ActioNet Core Value #1 - Instill Integrity In Everything We Do