SOC Tier 3 Analyst

Global Alliant Inc•Glen Burnie, MD

2d•Hybrid

About The Position

The SOC Tier 3 Analyst conducts advanced security operations work, including forensic investigations of compromised systems, root-cause and impact analysis, malware and attacker-tool analysis, threat hunting, and development and tuning of detection rules. The position provides technical support and expertise to Tier 1 and Tier 2 SOC personnel and contributes to SOC monitoring and escalation processes, cybersecurity initiatives, and the engineering and implementation of monitoring and analysis tools. The analyst reviews, evaluates, and triages security alerts in Sentinel using dashboards, reports, and custom queries, and investigates potential cyber incidents using captured network traffic, intrusion detection software, and Sentinel instrumentation. The role also includes incident-response procedures, technical briefings, documentation, security monitoring, vulnerability management, assessments, and other security engineering duties assigned by OSM SOC and senior management. This is a hybrid role based in Crownsville, Maryland, requiring work at the office two to three times per week or according to a rotation schedule with other Tier 3 Analysts. U.S. citizenship is required due to federal regulations and the sensitive nature of the work. Availability outside regular hours or on weekends may be required for critical incidents.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical or scientific discipline.
At least 10 years of relevant experience in cybersecurity, digital forensics, or incident response.
Proficiency with forensic tools.
Experience with SIEM platforms, including Sentinel.
Malware analysis skills.
Network traffic analysis skills.
Threat intelligence gathering skills.
U.S. citizenship is required.
Must be able to work at the Crownsville office two to three times per week or according to a rotation schedule with other Tier 3 Analysts.
Strong leadership and communication skills.

Nice To Haves

GREM, CEH, CHFI, GCFE, GIAC, or similar cybersecurity or forensics credentials.

Responsibilities

Plan, initiate, and conduct forensic investigations on compromised systems.
Perform root-cause analysis and assess the scope and impact of incidents; prepare detailed forensic reports.
Support malware analysis, including identifying and analyzing malicious payloads, attacker tools, and techniques.
Train SOC analysts on SIEM tools such as Sentinel, develop and tune detection rules, and help create SOC monitoring processes.
Correlate actionable security events, review threat data, develop custom detection signatures, and conduct threat hunting.
Contribute to technical briefings and develop incident-response procedures; ensure adherence to operational and technical standards.
Assist with the development of SOC tiered monitoring and escalation processes.
Provide support to SOC Analyst Tier 1 and Tier 2 personnel.
Provide technical expertise for cybersecurity projects and initiatives, including Endpoint Protection and Response, Vulnerability Management, and Security Operations Expansion.
Provide technical expertise and support for cybersecurity monitoring and analysis tool engineering and implementation.
Review, evaluate, and triage Sentinel security alerts using dashboards, reports, and custom queries.
Investigate possible cyber incidents using captured network traffic, intrusion detection software, and Sentinel instrumentation.
Perform other assigned security program development, documentation, monitoring, threat hunting, vulnerability management, technical and risk assessment, and security engineering duties.
Be available outside regular hours or on weekends when needed to respond to critical incidents.