Soc Tier 3 Analyst

Global Alliant Inc•Crownsville, MD

7d•Hybrid

About The Position

The SOC Tier 3 Analyst will be responsible for planning, initiating, and conducting forensic investigations on compromised systems, performing root cause and scope-of-impact analysis, and creating detailed forensic reports. This role supports malware analysis of attacker tools and techniques, identifies and analyzes malicious payloads, and trains SOC analysts on SIEM tools like Sentinel. The analyst will develop and tune detection rules, assist in creating new SOC monitoring processes, correlate actionable security events, review threat data, develop custom detection signatures, and conduct threat hunting to identify advanced threats. Additionally, the role contributes to technical briefings, develops incident response procedures, ensures adherence to operational and technical standards, and may require on-call support outside regular hours or on weekends. The position also involves assisting with the development of SOC tiered monitoring and escalation processes, providing support for SOC Analyst Tiers 1 & 2, and offering technical expertise in the development of cybersecurity projects such as End Point Protection and Response, Vulnerability Management, and Security Operations Expansion. The analyst will also provide technical expertise and support in Cybersecurity monitoring and analysis tool engineering and implementation, review and triage security alerts in Sentinel, and use tools like captured network traffic, intrusion detection software, and Sentinel instrumentation to investigate possible cyber incidents. Other duties include security program development, documentation, security monitoring, threat hunting, vulnerability management, technical and risk assessment, and security engineering.

Requirements

US citizenship (due to federal regulations and the sensitive nature of the work)
Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical/scientific discipline
10+ years of relevant experience in cybersecurity, digital forensics, or incident response
Proficiency with forensic tools
Proficiency with SIEM platforms (Sentinel)
Experience with malware analysis
Experience with network traffic analysis
Experience with threat intelligence gathering
Must be able to work at the Crownsville office 2–3 times a week or rotation schedule with other Tier 3 Analysts
Strong leadership and communication skills

Nice To Haves

GREM, CEH, CHFI, GCFE, GIAC, or similar cybersecurity/forensics credentials

Responsibilities

Plan, initiate, and conduct forensic investigations on compromised systems
Perform root cause and scope-of-impact analysis
Create detailed forensic reports
Support malware analysis of attacker tools and techniques
Identify and analyze malicious payloads
Train SOC analysts on SIEM tools (e.g., Sentinel)
Develop and tune detection rules
Assist in creating new SOC monitoring processes
Correlate actionable security events
Review threat data
Develop custom detection signatures
Conduct threat hunting to identify advanced threats
Contribute to technical briefings
Develop incident response procedures
Ensure adherence to operational and technical standards
Provide support for SOC Analyst Tier 1 & 2 personnel
Provide technical expertise in the development of existing Cybersecurity projects and initiatives
Provide technical expertise & support in Cybersecurity monitoring and analysis tool engineering and implementation
Review, evaluate, and triage security alerts in Sentinel using dashboards, reports, and custom queries
Use tools, such as captured network traffic, intrusion detection software and Sentinel instrumentation to investigate possible cyber incidents
Perform other security program development, documentation, security monitoring, threat hunting, vulnerability management, technical and risk assessment, and security engineering duties assigned by OSM SOC and senior management