1

Program Analyst Three Jobs in Indiana (NOW HIRING)

What You Will Do The Cybersecurity Analyst III at EXOS CYBER is the senior technical escalation ... Own and run the proactive threat hunting program: develop hypothesis-driven hunts across the client ...

We are currently looking for a Program Analyst & Data Analytics Coordinator . This role will help ... three days, with a closing date no earlier than three days after the original posting. This ...

Showing results 41-60

Program Analyst Three information

What is the difference between Program Analyst Three vs Program Analyst Two?

AspectProgram Analyst ThreeProgram Analyst Two
Required CredentialsBachelor's degree, possibly some certificationsBachelor's degree, entry-level certifications
Work EnvironmentGovernment agencies, federal projectsSimilar government or organizational settings
Employer & Industry UsageCommon in federal agencies, military, and large organizationsUsed in similar environments, often as a stepping stone
Search & Comparison IntentHigher-level responsibilities, complex projectsEntry to mid-level analysis tasks

Program Analyst Three typically involves more complex projects and greater responsibilities compared to Program Analyst Two. While both roles are found in government and large organizations, the Program Analyst Three often requires additional experience or certifications, reflecting its higher level of expertise and scope.

What GS level is a Program Analyst Three?

A Program Analyst Three is typically classified at the GS-11 or GS-12 level in the General Schedule pay scale, depending on experience and qualifications. These positions often require specialized skills, and advancement may involve gaining experience or additional certifications. The specific GS level can vary based on agency and job responsibilities.

What does a program analyst three actually do?

A Program Analyst Three is responsible for evaluating and improving program efficiency, analyzing data, and developing reports to support decision-making. They often use tools like Excel or specialized software and may oversee project implementation, ensuring compliance with policies and regulations. This role typically requires strong analytical skills and experience in program management.

What is the career progression of a Program Analyst Three?

A Program Analyst Three is a mid-level position that typically progresses to higher roles such as Program Manager, Senior Analyst, or Project Lead, often requiring additional experience, leadership skills, and certifications like PMP. Advancement depends on performance, expertise, and organizational needs, with opportunities to move into supervisory or specialized roles within the agency or organization.

What are popular job titles related to Program Analyst Three jobs in Indiana?

For Program Analyst Three jobs in Indiana, the most frequently searched job titles are:

What cities in Indiana are hiring for Program Analyst Three jobs?

Cities in Indiana with the most Program Analyst Three job openings:

Infographic showing various Program Analyst Three job openings in Indiana as of August 2026, with employment types broken down into 1% As Needed, 77% Full Time, 18% Part Time, and 4% Contract. Highlights an 96% Physical, 2% Hybrid, and 2% Remote job distribution.

Cybersecurity Analyst III

Indianapolis, IN

Full-time

Re-posted 13 days ago


Key responsibilities

  • Serve as the Tier 3 technical escalation point, drive complex incident investigations to resolution, and provide evidence-backed recommendations.

  • Lead confirmed true-positive incidents end to end, including scoping, containment, eradication, recovery, and client communication.

  • Own and run the proactive threat hunting program, developing hypotheses, conducting investigations, and feeding findings into detection engineering.


Job description

What You Will Do


The Cybersecurity Analyst III at EXOS CYBER is the senior technical escalation point of the SOC ? the final analyst-tier authority on the hardest, most ambiguous investigations before a case moves into engineering. When Tier 2 has driven an alert as far as standard playbooks and queries allow and still doesn't have a confident answer, it comes to you. You own confirmed, significant incidents end to end across our client environments. You will support day-to-day security operations for our clients with a primary focus on advanced detection, incident response, and threat hunting, working alongside our Cybersecurity Engineers, and Team Lead.


Beyond the queue, you set the bar for investigation quality across the SOC. You QA escalations, mentor and develop Tier 1 and Tier 2, build out the investigation curriculum, and partner with engineering on detection strategy at the program level, not just one noisy rule at a time. This is a hands-on, deeply technical role designed for analysts with 5+ years of experience (or 2+ years past Tier 2) who are ready to operate as the senior individual contributor in a real-world MSSP detection-and-response practice spanning across a diverse client environments. 


  • Serve as the Tier 3 technical escalation point in the SOC. Take the incidents that Tier 2 cannot fully resolve, drive them to a definitive answer, and hand only genuinely engineering-scoped or architecture-level problems to the Cybersecurity Engineers and Team Lead with a clear, evidence-backed recommendation and a proposed course of action. 
  • Lead confirmed true-positive incidents end to end across client environments including but not limited to ransomware, business email compromise, account takeover, lateral movement, and data exfiltration including scoping and impact assessment, containment orchestration via SentinelOne, account isolation and credential rotation in Entra ID, eradication and recovery guidance, evidence preservation, root-cause analysis, and client communication through resolution. 
  • Own and run the proactive threat hunting program: develop hypothesis-driven hunts across the client base using various queries, EDR telemetry, and indicators from CTI feeds; document findings; and feed confirmed patterns back into detection engineering as durable, reusable detections. 
  • Perform host, memory, and network forensics (Velociraptor, endpoint and identity artifacts, timeline reconstruction) to establish what happened, when, and how far it went, and to support breach-notification and legal/insurance coordination when an incident warrants it. 
  • Conduct phishing triage and support email-based threat investigations, including user impact assessment and remediation steps. 
  • Partner with the Cybersecurity Engineers and AI Automation Engineer on detection strategy at the program level coverage and gap analysis against MITRE ATT&CK, detection content design, and false-positive reduction across the fleet rather than one-off alert tuning. 
  • Apply offensive and adversary-emulation knowledge to inform detection coverage, and support purple team and adversary-emulation exercises by translating attacker TTPs into detections and validating that controls fire as expected. 
  • Analyze endpoint, identity, and network telemetry to identify suspicious activity, lateral movement, and persistence, and lead phishing and email-based threat investigations through full user-impact assessment and remediation.