Tier 3 Cybersecurity Analyst

ActioNet; Rockville (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life/AD&D Insurance

401(k) Savings Plan

Education & Training

FSA

PTO

Disability Insurance

Identity Theft Protection

Employee Assistance

Job summary

ActioNet is seeking a Tier 3 Cybersecurity Analyst in Rockville, MD to lead advanced incident detection, response, and forensic investigations. The role requires extensive expertise in malware analysis, threat hunting, and multi-source data fusion to mitigate sophisticated cyber threats.

The position emphasizes software and security operations leadership within an intelligence-driven SOC, collaboration with federal agencies, and ongoing development of SIEM/SOAR capabilities.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
• Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
• Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
• Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
• Experience providing technical guidance and mentorship to cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
• Demonstrated experience with information security, information risk management, and information systems risk assessment.

Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
• Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
• Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
• Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
• Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
• Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
• Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
• Support and enhance enterprise security technologies, including IDS, IPS, DLP, and ATP capabilities.
• Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
• Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
• Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.

Skills

Incident response

Malware analysis

Cyber forensics

Threat hunting

SIEM

Threat intelligence

Security operations

Mentorship

Education

Bachelor's degree in Cybersecurity/CS/IT/Info Assurance

Tools

SIEM

SOAR

IDS/IPS

DLP

ATP

Job description

The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems.

Salary $130k-170K

Clearance: TS/ DOE Q

Key Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
• Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
• Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
• Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
• Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
• Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
• Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
• Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities.
• Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
• Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
• Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
• Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
• Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
• Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
• Experience providing technical guidance and mentorship to cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
• Demonstrated experience with information security, information risk management, and information systems risk assessment.

ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:

• Medical Insurance
• Vision Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance

ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

ActioNet Core Value #1 - Instill Integrity In Everything We Do