Senior cybersecurity analytics specialist who analyzes network and security telemetry to uncover threats, develops and tunes SIEM queries, rules and signatures, and partners with incident response to reduce false positives and validate defenses. Requires an active TS/SCI clearance, U.S. citizenship, and 8+ years of experience.
Help strengthen enterprise cyber defenses by analyzing threat activity, improving detection logic, and validating defensive countermeasures. You will work across cybersecurity teams to identify emerging risks, reduce false positives, and support incident response.
What You Will Do
Analyze network and security data to identify trends, hidden threats, and potential incidents.
Develop and tune SIEM queries, rules, signatures, and scripts.
Correlate threat intelligence, incident findings, and system activity to improve detection.
Partner with incident response and cyber analytics teams during investigations and exercises.
Evaluate alerts and false positives to improve detection quality.
Document analysis and contribute to technical briefings.
What You Bring
Active TS/SCI clearance and U.S. citizenship.
At least eight years of advanced cybersecurity analytics experience.
DoD 8140/8570 IAT Level III and CSSP Analyst compliant certification.
Experience with SIEM query development, data mining, and detection tuning.
Strong knowledge of network protocols, traffic analysis, signatures, and regular expressions.
Preferred Qualifications
Python, Bash, or PowerShell scripting.
Purple team experience.
Cloud security, data lake, or large-scale security analytics experience.
Experience with hex editors or static file analysis.