Tier 3 SOC Analyst

SBD is seeking a Tier 3 SOC Analyst to support a state government security operations center in Maryland. This is a full-time position through June 30, 2027.

Responsibilities:
Plan and conduct forensic investigations on compromised systems, including root cause and scope-of-impact analysis.
Produce detailed forensic reports.
Analyze attacker tools, techniques, and malicious payloads.
Review, evaluate, and triage security alerts in Microsoft Sentinel using dashboards, reports, and custom queries.
Develop and tune detection rules and custom signatures.
Conduct threat hunting to identify advanced threats.
Train and support Tier 1 and Tier 2 analysts.
Contribute to technical briefings and the development of incident response procedures.
Support endpoint protection and response, vulnerability management, and security operations expansion initiatives.

Required Qualifications:
Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical or scientific discipline.
4+ years of relevant experience in cybersecurity, digital forensics, or incident response.
Hands-on proficiency with Microsoft Sentinel, including dashboards, reports, and custom queries.
Proficiency with forensic tools, malware analysis, network traffic analysis, and threat intelligence gathering.
Strong leadership and communication skills.
Availability for on-call response outside regular business hours and on weekends as needed.
U.S. work authorization without sponsorship.

Preferred Qualifications:
GREM, CEH, CHFI, GCFE, or other GIAC credentials.
Experience training or supporting Tier 1 and Tier 2 analysts.
Detection rule development and tuning.
Public-sector SOC experience.

This is a hybrid role, requiring 2-3 days per week on-site on a rotation schedule with other Tier 3 analysts.