Tier 3 Cybersecurity Analyst at ActioNet in Rockville, Maryland

Job description

• Tier 3 Cybersecurity Analyst
• Location: Rockville, MD
• The Tier 3 Cybersecurity Analyst serves as a senior technical leader within the SOC, responsible for advanced threat detection, incident response, threat hunting, and forensic analysis. This role operates at the core of the intelligence-driven SOC model, fusing multi-source data to identify, analyze, and mitigate sophisticated cyber threats impacting Agency systems.
• Salary $130k-170K
• Clearance: TS/ DOE Q
• As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?

Responsibilities

• Lead advanced incident detection, analysis, response, containment, eradication, and recovery activities for complex and high-severity cybersecurity incidents.
• Perform proactive threat hunting using behavioral analytics, SIEM correlation, threat intelligence, and advanced detection methodologies.
• Conduct comprehensive cyber forensic investigations, including host, network, endpoint, malware, and digital evidence analysis.
• Analyze, synthesize, evaluate, interpret, and integrate information from multiple security, intelligence, and operational data sources to identify emerging threats and attack patterns.
• Fuse computer network attack analysis with cyber threat intelligence, counterintelligence, and law enforcement information to support incident investigations, attribution, and response activities.
• Develop and maintain detection analytics, SIEM use cases, correlation rules, automation scripts, and SOAR playbooks to improve detection, response, and operational efficiency.
• Perform network traffic packet analysis, protocol analysis, log analysis, malicious software analysis, and email security analysis to identify indicators of compromise and adversary tactics.
• Support information risk management and information systems risk assessment activities by identifying cybersecurity risks, vulnerabilities, and recommended mitigation strategies.
• Support and enhance enterprise security technologies, including Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and Advanced Threat Protection (ATP) capabilities.
• Provide technical leadership, guidance, and mentorship to Tier 1 and Tier 2 analysts in cyber threat analysis, incident response, and security operations.
• Collaborate with federal agencies, including CISA, US-CERT, law enforcement, and counterintelligence organizations, during complex cybersecurity investigations.
• Support M-21-31 logging maturity initiatives through log validation, normalization, correlation, and visibility improvements across enterprise systems.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, or a related field.
• Eight (8) or more years of professional experience in cybersecurity operations, incident response, malware analysis, cyber forensics, or network security.
• Demonstrated experience in network security architecture, incident detection and response, malware analysis, and cyber forensics.
• Experience analyzing, synthesizing, evaluating, interpreting, and integrating information from multiple intelligence and security data sources.
• Experience providing technical guidance and mentorship to cybersecurity personnel.
• Experience supporting investigations involving cyber threat intelligence, counterintelligence, and law enforcement organizations.
• Demonstrated experience with information security, information risk management, and information systems risk assessment.

Skills

Required

• Advanced threat detection
• Incident response
• Threat hunting
• Forensic analysis
• Behavioral analytics
• SIEM correlation
• Threat intelligence
• Network traffic packet analysis
• Protocol analysis
• Log analysis
• Malicious software analysis
• Email security analysis

Benefits

• Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:
• Medical Insurance
• Vision Insurance
• Dental Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance