Tier 1 Cybersecurity Analyst

Job Description:

Dynamo Technologies, LLC requires a Tier 1 Cybersecurity Analyst to support the United States Department of Agriculture (USDA), Office of the Chief Information Officer (OCIO), Cybersecurity and Privacy Operations Center (CPOC), which serves and supports USDA Agencies and Offices by helping to protect mission-critical assets and information, thereby securing the Country’s diverse food, agriculture, rural and natural resources programs. The CPOC monitors and protects USDA’s systems by keeping abreast of new threats to both existing and new technologies and continually monitoring the USDA information technology enterprise to ensure USDA Agencies and Offices computing environments remain secure. The OCIO provides leadership in the development, implementation, and management of security solutions into the everyday business of the Department to ensure the confidentiality, integrity, and availability of the United States Department of Agriculture (USDA) data and information systems.

Note: This is a hybrid role requiring at least two in-person days per week at the USDA DC South Building. Hours/days may vary based on shift requirements.

Duties/ Responsibilities

The Tier 1 Cybersecurity Analyst supports the USDA Information Security Center (ISC) Security Operations Center (SOC), providing 24x7x365 monitoring and incident response to protect USDA’s enterprise networks.
This position performs front-line defensive operations, real-time monitoring, and incident triage to safeguard USDA systems from unauthorized access, malicious activity, and cyber threats.

Primary responsibilities include:

• Perform continuous monitoring of enterprise network and security systems to detect and report suspicious or unauthorized activities.

• Analyze data from multiple sources (SIEM tools, IDS/IPS, DLP alerts, wireless and endpoint telemetry) to identify anomalies and potential intrusions.

• Maintain and update IP/DNS watchlists, detection rules, and threat intelligence feeds.

• Answer and respond to 24-hour cybersecurity hotline and incident emails, ensuring timely and appropriate escalation.

• Create and manage incident tickets in the SOC tracking system, documenting actions and resolutions in alignment with USDA processes.

• Conduct preliminary triage, artifact collection, and correlation of data for escalation to Tier 2 analysts as needed.

• Support execution of defensive measures including IP blocking, malware containment, and coordination with infrastructure teams for network mitigation.

• Coordinate with USDA, US-CERT, and other external partners to investigate, resolve, and report security incidents.

• Contribute to incident reports, advisories, and executive summaries that communicate situational awareness across USDA leadership.

• Track and compile incident metrics to support trend analysis and reporting.

Required Skills/Abilities

• 3+ years of experience in cybersecurity operations or network monitoring in a 24x7 environment.

• Proficiency with SIEM tools (e.g., Splunk, ArcSight, QRadar) and IDS/IPS systems.

• Familiarity with incident response lifecycle, network protocols, and log analysis.

• Experience handling malware detection, intrusion alerts, and DLP events.

• Strong written communication skills for documenting incidents and creating reports.

• Demonstrated ability to work in a structured, high-availability SOC environment.

• U.S. citizenship required

Nice to Have Skills

• Experience supporting federal SOC or CSSP environments.

• Certifications such as Security+, Network+, CEH, or CySA+.

• Familiarity with SNOW Incident Management System and USDA-specific processes.

<