Soc Tier 3 Analyst

Job Title: SOC Tier 3 Analyst

Location: Crownsville MD Local Candidates Only
Onsite Address: DoIT HQ 100 Community Place Crownsville MD
Employment Type: Full-Time
Work Arrangement: Hybrid

Criteria-Need US citizenshipbecause of federal regulations and the sensitive nature of the work involved

Summary of Key Responsibilities

• Incident Response & Forensics: Plan initiate and conduct forensic investigations on compromised systems; perform root cause and scope-of-impact analysis; create detailed forensic reports.
• Malware & Tool Analysis: Support malware analysis of attacker tools and techniques; identify and analyze malicious payloads.
• Tool & Process Development: Train SOC analysts on SIEM tools (e.g. Sentinel) develop and tune detection rules and assist in creating new SOC monitoring processes.
• Threat Intelligence & Hunting: Correlate actionable security events review threat data develop custom detection signatures and conduct threat hunting to identify advanced threats.
• Technical Leadership: Contribute to technical briefings develop incident response procedures and ensure adherence to operational and technical standards.
• On-Call Support: May require availability outside regular hours or on weekends to respond to critical incidents.

Additional Job Description

• Assists with the development of Security Operation Center (SOC) tiered monitoring and escalation processes.
• Provides support for SOC Analyst Tier 1 & 2 personnel.
• Provides technical expertise in the development of existing Cybersecurity projects and initiatives to include but not limited to: End Point Protection and Response Vulnerability Management Security Operations Expansion.
• Provides technical expertise & support in Cybersecurity monitoring and analysis tool engineering and implementation.
• Reviews evaluates and triages security alerts in Sentinel using dashboards reports and custom queries.
• Uses tools such as captured network traffic intrusion detection software and Sentinel instrumentation to investigate possible cyber incidents.
• Other security program development documentation security monitoring threat hunting vulnerability management technical and risk assessment and security engineering duties assigned by OSM SOC and senior management.

Required Qualifications

Education:

• Bachelors degree in Computer Science Information Systems Engineering or a related technical/scientific discipline.

Experience:

• 10 years of relevant experience in cybersecurity digital forensics or incident response.

Skills:

• Proficiency with forensic tools.
• SIEM platforms (Sentinel).
• Malware analysis.
• Network traffic analysis.
• Threat intelligence gathering.

Certifications:

• GREM CEH CHFI GCFE GIAC or similar cybersecurity/forensics credentials are preferred.

Additional Requirements

• Hybrid position Must be able to work at the Crownsville office 23 times a week or rotation schedule with other Tier 3 Analysts.
• Strong leadership and communication skills.
• If interested in applying for the position please reach out to me at

Required Experience:

Manager