Bachelor's degree in Computer Science, Information Systems, Engineering, or related field.
10+ years of experience in cybersecurity, digital forensics, or incident response.
Proficiency with forensic tools and SIEM platforms (e.g., Sentinel).
Experience in malware and network traffic analysis.
Strong skills in threat intelligence gathering and analysis.
Preferred certifications include GREM, CEH, CHFI, GCFE, GIAC, or similar.
Responsibilities
Plan and conduct forensic investigations on compromised systems.
Support malware analysis of attacker tools and techniques.
Train SOC analysts on SIEM tools and develop detection rules.
Correlate actionable security events and conduct threat hunting.
Contribute to technical briefings and develop incident response procedures.
Provide on-call support for critical incidents outside regular hours.
Assist in developing SOC monitoring and escalation processes.
Benefits
Hybrid work arrangement with flexibility.
Opportunity for technical leadership and skill development.
Engagement in advanced cybersecurity projects and initiatives.
Supportive environment for SOC Analyst Tier 1 & 2 personnel.
Access to cutting-edge cybersecurity tools and technologies.
Full Job Description
Job Title: SOC Tier 3 Analyst
Location: Crownsville, MD - Local Candidates Only Employment Type: Full-Time Work Arrangement: Hybrid
Criteria- Need US citizenship because of federal regulations and the sensitive nature of the work involved
Summary of Key Responsibilities
Incident Response & Forensics: Plan, initiate, and conduct forensic investigations on compromised systems; perform root cause and scope-of-impact analysis; create detailed forensic reports.
Malware & Tool Analysis: Support malware analysis of attacker tools and techniques; identify and analyze malicious payloads.
Tool & Process Development: Train SOC analysts on SIEM tools (e.g., Sentinel), develop and tune detection rules, and assist in creating new SOC monitoring processes.
Technical Leadership: Contribute to technical briefings, develop incident response procedures, and ensure adherence to operational and technical standards.
On-Call Support: May require availability outside regular hours or on weekends to respond to critical incidents.
Additional Job Description
Assists with the development of Security Operation Center (SOC) tiered monitoring and escalation processes.
Provides support for SOC Analyst Tier 1 & 2 personnel.
Provides technical expertise in the development of existing Cybersecurity projects and initiatives to include but not limited to: End Point Protection and Response, Vulnerability Management, Security Operations Expansion.
Provides technical expertise & support in Cybersecurity monitoring and analysis tool engineering and implementation.
Reviews, evaluates, and triages security alerts in Sentinel using dashboards, reports, and custom queries.
Uses tools, such as captured network traffic, intrusion detection software and Sentinel instrumentation to investigate possible cyber incidents.
Other security program development, documentation, security monitoring, threat hunting, vulnerability management, technical and risk assessment, and security engineering duties assigned by OSM SOC and senior management.
Required Qualifications
Education:
Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical/scientific discipline.
Experience:
10+ years of relevant experience in cybersecurity, digital forensics, or incident response.
Skills:
Proficiency with forensic tools.
SIEM platforms (Sentinel).
Malware analysis.
Network traffic analysis.
Threat intelligence gathering.
Certifications:
GREM, CEH, CHFI, GCFE, GIAC, or similar cybersecurity/forensics credentials are preferred.
Additional Requirements
Hybrid position - Must be able to work at the Crownsville office 2-3 times a week or rotation schedule with other Tier 3 Analysts.
