{"id":730732,"url":"https://alion.io/job/d2consulting-cyber-security-operations-specialist-tier-3","title":"Cyber Security Operations Specialist Tier 3","company":{"id":673019,"name":"D2 Consulting","domain":"d2consulting.com","url":"https://alion.io/company/d2consulting","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":30,"ghost_share":0.367,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Springfield, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":115000,"currency":"USD","period":"year","gross":null,"usd_annual":115000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-04-02T14:14:45Z","employer_posted_date":"2026-05-19","last_verified_at":"2026-10-25T21:20:14Z","board_verified":true,"closed_at":null,"days_open":206,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":205},"description":"**ACTIVE TS/SCI SECURITY CLEARANCE REQUIRED**\nJoin Our Team as a CSOC Tier 3 Cybersecurity Incident Responder - Protect the Nation's Critical Infrastructure!\nThis role is in anticipation of funded work. Are you ready to take on a pivotal role in defending critical systems from cyber threats? As a CSOC Tier 3 Cybersecurity Incident Responder, you will be at the forefront of cybersecurity operations, providing advanced support for containment, eradication, and recovery during incidents. Your expertise in malware analysis, digital forensics, and incident response will be key in ensuring our defenses remain strong and resilient.\nThis position offers you the chance to collaborate with a skilled team, engage in hands-on technical work, and continuously improve response strategies through exercises and simulations. If you’re driven, detail-oriented, and have a passion for cybersecurity, we want you on our team!\nWhat You’ll Do:\nIncident Response Leadership: Coordinate and execute tasks during cybersecurity incidents, including containment measures, IP/domain blocks, and disabling user accounts under Government direction.\nCollaborative Investigations: Work closely with the Security and Installations Directorate, Insider Threat Office, law enforcement, and counterintelligence personnel to triage and investigate incidents.\nIncident Reporting & Categorization: Produce detailed security incident reports, categorize events, and ensure proper reporting, containment, and eradication of incidents.\nCross-team Coordination: Ensure seamless coordination across contracts and organizations to de-conflict blue/red team activities and ensure recovery from incidents.\nDocumentation & Analysis: Develop timelines, briefings, and documentation to inform stakeholders about incident impacts and response actions. Keep detailed records of actions taken in authorized ticketing systems.\nCustom Tools & Scripting: Develop and execute custom scripts and tools to analyze data and respond to incidents, when authorized by the Government.\nDigital Media & Malware Analysis: Perform in-depth analysis of host, server, and network data, including volatile and non-volatile memory, system artifacts, and malware reverse engineering.\nAdversary Attribution & Signature Development: Identify indicators of compromise and develop signatures to share with cybersecurity stakeholders. Provide detailed adversary attribution to support incident response.\nContinuous Improvement: Collaborate with Tier 1 and 2 teams to remediate discrepancies and provide recommendations to prevent future incidents.\nWhat You’ll Need to Succeed:\nExperience: A Bachelor's Degree or 8+ years of relevant cybersecurity experience, with a strong focus on incident response and digital forensics.\nSecurity Clearance: Active TS/SCI clearance with the ability to obtain a polygraph.\nCertifications: Must have or be able to obtain certifications as required by DoDD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Incident Responder within six months of start.\nAdvanced Cybersecurity Skills: Expertise in malware analysis, digital forensics, and response to cybersecurity incidents, including host, server, and network data analysis.\nTechnical Expertise: Proficiency in scripting and automation, with a focus on developing custom tools to enhance incident response capabilities.\nStrong Communication: Ability to work under pressure and clearly communicate complex technical details to both internal teams and external stakeholders.\nCollaboration & Coordination: Experience working as part of a team, coordinating efforts across multiple organizations and government agencies to ensure swift and effective incident response.\nDocumentation & Reporting: Skilled at creating detailed incident reports, timelines, and recommendations, with a focus on clear, actionable insights.\nPreferred Qualifications:\nAdvanced Degree: A Master's degree in Cybersecurity or a related field.\nHigher-Level Certifications: IAT III certification or equivalent expertise in the cybersecurity field.\nWhy You Should Apply:\nImpactful Work: Play a key role in defending critical systems from advanced cyber threats and work on real-world cybersecurity incidents.\nCollaborative Team: Work with top-tier cybersecurity professionals and government agencies to strengthen national security.\nContinuous Learning: Engage in hands-on, technical work with opportunities for continuous improvement through exercises, simulations, and advanced training.\nMission-Driven: Support critical national security missions and contribute to the broader cybersecurity community.\nIf you're ready to take on a challenging and rewarding role in cybersecurity, apply today and help us strengthen our defenses against emerging cyber threats!\nAdditional Information\nAll your information will be kept confidential according to EEO guidelines.\nCompensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $110-115k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.\nHighlights of our benefits include Health/Dental/Vision, 401(k) match, Accrued PTO, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and more!\nD2 Technical Services is committed to a merit-based recruitment process and encourages applications from all qualified individuals. As a Veteran-Owned Small Business, we particularly welcome applications from veterans who have the requisite skills and experience. Job applicants that are interested in one of our openings and may require a reasonable accommodation to participate in the job application or interview process, should contact us to request an accommodation.","description_format":"text","description_chars":5870,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Continuous learning","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Digital Government","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-09-11T09:42:11Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.247,"p_room":0.28,"age_days":205,"expected_fill_days":44,"reasons":["conf:3","ghost","win:tail","crowd:"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":115000,"is_top_pay":false},"html_url":"https://alion.io/job/d2consulting-cyber-security-operations-specialist-tier-3","json_url":"https://alion.io/job/d2consulting-cyber-security-operations-specialist-tier-3.json","meta":{"generated_at":"2026-10-26T00:17:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":302,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673019},"rest":"https://alion.io/mcp/rest/get_company?id=673019"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fd2consulting-cyber-security-operations-specialist-tier-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fd2consulting-cyber-security-operations-specialist-tier-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fd2consulting-cyber-security-operations-specialist-tier-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/d2consulting-cyber-security-operations-specialist-tier-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fd2consulting-cyber-security-operations-specialist-tier-3"}]}