Qualifications

• Bachelor's degree in cybersecurity, IT, or related field.
• 8+ years of experience in incident response, threat hunting, malware analysis, or cyber forensics.
• Deep expertise in SIEM platforms and log analysis.
• Strong proficiency in network traffic and packet analysis.
• Experience with intrusion detection/prevention systems and malware analysis (static/dynamic).
• Knowledge of threat intelligence integration and analysis.
• Strong understanding of NIST, FISMA, EO 14028, and M-21-31 logging requirements.

Responsibilities

• Lead advanced incident detection, response, and escalation support for high-severity cyber events.
• Perform proactive threat hunting using behavioral analytics and threat intelligence.
• Conduct deep-dive forensic investigations, including host, network, and malware analysis.
• Correlate data across multiple sources to identify attack patterns.
• Develop and refine detection rules and SIEM use cases.
• Provide mentorship and guidance to Tier 1 and Tier 2 analysts.
• Integrate cyber threat intelligence with operational analysis, including APT activity.
• Support initiatives for logging maturity improvements.
• Contribute to automation and detection engineering efforts.
• Collaborate with federal stakeholders during major incidents.

Benefits

• Opportunities for professional growth and development.
• Access to advanced tools and resources in a cutting-edge SOC environment.
• Involvement in high-stakes cyber threat response and investigations.
• Collaboration with federal entities like CISA and US-CERT.