Tier 3 Analyst (Secret clearance)

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.  

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking a Tier 3 Analyst (Secret Clearance) with deep expertise supporting the enterprise Security Operations Center (SOC). This role provides advanced support for issues escalated from Tier 2, investigates anomalies in vulnerability data and ensures effective response across both classified and unclassified environments. The Tier 3 Analyst position requires expert technical knowledge, creativity in developing solutions and the ability to address complex problems impacting multiple disciplines. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Lead investigations of complex incidents escalated from Tier 2 and serve as the shift's technical authority.
• Perform dynamic malware analysis and post-incident root cause reviews.
• Analyze vulnerability data (e.g., Department of Homeland Security (DHS) Cyber Hygiene reports) for anomalies and drive bureau remediation.
• Deliver accurate, complete, and timely incident analysis and after-action reports.
• Challenge conclusions, coach junior analysts, and translate lessons learned into improved Standard Operating Procedures (SOPs) and detections.

What you need to know:

• Enterprise incident handling across on-premises and cloud environments.
• Advanced log, packet, and endpoint analysis.
• Incident reporting to federal partners, including the Cybersecurity and Infrastructure Security Agency (CISA), Office of Inspector General (OIG), and law enforcement.

Must have’s:

• Bachelor’s degree or 3+ additional years of relevant experience in lieu of degree.
• 7+ years of relevant experience.
• Advanced proficiency with Splunk and FireEye Endpoint Security (HX), supported by a deep understanding of SIEM and EDR technologies regardless of vendor.
• Demonstrated critical thinking skills to break down complex, ambiguous problems into actionable tasks and determine appropriate courses of action.
• Ability to work rotating shifts and provide on-call support in a 24x7x365 SOC environment.
• Applicants must currently hold and maintain an active Secret clearance.

Beneficial to have:

• One or more of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), or Certified Information Systems Security Professional (CISSP).
• Microsoft Defender and Python scripting experience.

Where it’s done:

• Onsite (Washington, DC).