Tier 1 Cybersecurity Analyst

Job Description:

Dynamo Technologies, LLC requires a Tier 1 Cybersecurity Analyst to support the United States Department of Agriculture (USDA), Office of the Chief Information Officer (OCIO), Cybersecurity and Privacy Operations Center (CPOC), which serves and supports USDA Agencies and Offices by helping to protect mission-critical assets and information, thereby securing the Country's diverse food, agriculture, rural and natural resources programs. The CPOC monitors and protects USDA's systems by keeping abreast of new threats to both existing and new technologies and continually monitoring the USDA information technology enterprise to ensure USDA Agencies and Offices computing environments remain secure. The OCIO provides leadership in the development, implementation, and management of security solutions into the everyday business of the Department to ensure the confidentiality, integrity, and availability of the United States Department of Agriculture (USDA) data and information systems.

Note: This is a hybrid role requiring at least two in-person days per week at the USDA DC South Building. Hours/days may vary based on shift requirements.

Duties/ Responsibilities

The Tier 1 Cybersecurity Analyst supports the USDA Information Security Center (ISC) Security Operations Center (SOC), providing 24x7x365 monitoring and incident response to protect USDA's enterprise networks.

This position performs front-line defensive operations, real-time monitoring, and incident triage to safeguard USDA systems from unauthorized access, malicious activity, and cyber threats.

Primary responsibilities include:

• 
  

  Perform continuous monitoring of enterprise network and security systems to detect and report suspicious or unauthorized activities.

  
  
• 
  

  Analyze data from multiple sources (SIEM tools, IDS/IPS, DLP alerts, wireless and endpoint telemetry) to identify anomalies and potential intrusions.

  
  
• 
  

  Maintain and update IP/DNS watchlists, detection rules, and threat intelligence feeds.

  
  
• 
  

  Answer and respond to 24-hour cybersecurity hotline and incident emails, ensuring timely and appropriate escalation.

  
  
• 
  

  Create and manage incident tickets in the SOC tracking system, documenting actions and resolutions in alignment with USDA processes.

  
  
• 
  

  Conduct preliminary triage, artifact collection, and correlation of data for escalation to Tier 2 analysts as needed.

  
  
• 
  

  Support execution of defensive measures including IP blocking, malware containment, and coordination with infrastructure teams for network mitigation.

  
  
• 
  

  Coordinate with USDA, US-CERT, and other external partners to investigate, resolve, and report security incidents.

  
  
• 
  

  Contribute to incident reports, advisories, and executive summaries that communicate situational awareness across USDA leadership.

  
  
• 
  

  Track and compile incident metrics to support trend analysis and reporting.

  
  

Required Skills/Abilities

• 
  

  3+ years of experience in cybersecurity operations or network monitoring in a 24x7 environment.

  
  
• 
  

  Proficiency with SIEM tools (e.g., Splunk, ArcSight, QRadar) and IDS/IPS systems.

  
  
• 
  

  Familiarity with incident response lifecycle, network protocols, and log analysis.

  
  
• 
  

  Experience handling malware detection, intrusion alerts, and DLP events.

  
  
• 
  

  Strong written communication skills for documenting incidents and creating reports.

  
  
• 
  

  Demonstrated ability to work in a structured, high-availability SOC environment.

  
  
• 
  

  U.S. citizenship required

  
  

Nice to Have Skills

• 
  

  Experience supporting federal SOC or CSSP environments.

  
  
• 
  

  Certifications such as Security+, Network+, CEH, or CySA+.

  
  
• 
  

  Familiarity with SNOW Incident Management System and USDA-specific processes.

  
  
• 
  

  Working knowledge of APT defense strategies and threat mitigation techniques.

  
  

Education and Experience:

• 
  

  Years of Experience: 3-5 years

  
  
• 
  

  Education Requirement: Bachelor's Degree in Cybersecurity, Information Systems, or related field (or equivalent experience)

  
  

Travel Requirement:

• 
  

  Hybrid role with 2 days on site (WDC) and 3 remote

  
  

Clearance Requirement:

• 
  

  Public Trust

  
  

Dynamo is a full lifecycle digital transformation company providing best-in-class technology and mission support services to our clients. Dynamo's mission is to lead the digital transformation industry and provide best-in-class solutions for our clients with a truly human touch.

We leverage industry leading practices to empower our clients, ultimately providing them with the necessary tools, knowledge, and information required to successfully achieve their strategic goals, while optimizing their operations.

Through our partnerships, boldness, and authenticity, Dynamo goes against the grain of a traditional government contracting company by providing top-caliber team members, delivering quality results, and always exceeding expectations.

Dynamo Technologies is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, disability, protected veteran status, age, or any other characteristic protected by law.