Job Description

Cybersecurity Operations Analyst Tier 3

Clearance: Active TS/SCI

Schedule: Mission operations support

Serve as a senior incident responder supporting the containment, eradication, and recovery of complex cybersecurity incidents. You will perform forensic analysis, malware investigation, threat attribution, and advanced response activities in a mission-focused environment.

What You Will Do

• Lead technical analysis and response actions during cybersecurity incidents.
• Perform host, server, network, memory, and forensic artifact analysis.
• Analyze malware, develop signatures, and identify indicators of compromise.
• Build incident timelines, reports, briefings, and corrective-action recommendations.
• Develop and use approved scripts and tools to collect and analyze data.
• Coordinate with cybersecurity, counterintelligence, and law-enforcement stakeholders as required.
• Review incident tickets for accuracy, documentation, and response quality.
• Participate in exercises and readiness activities when not responding to active incidents.

What You Bring

• Active TS/SCI clearance with the ability to obtain a polygraph.
• Bachelor's degree or at least six years of cybersecurity experience.
• DoD 8140/8570 IAT Level II and CSSP Incident Responder compliant certification, or the ability to meet the required certification timeline.
• Experience with incident response, digital forensics, malware analysis, and defensive cyber operations.
• Strong technical writing and communication skills.

Preferred Qualifications

• Master's degree.
• IAT Level III certification.
• Malware reverse engineering or advanced scripting experience.