> Markdown version of [/jobs/ext/153734-cyber-security-specialist](https://www.wearedevelopers.com/jobs/ext/153734-cyber-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CYBER SECURITY SPECIALIST - **Company:** Peraton Inc - **Location:** Sierra Vista, AZ, United States (Remote available) - **Experience:** Expert - **Salary:** $80,000.0 - $128,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Bash Shell, Cyber Security, Computer Telephony Integration, Linux, Digital Forensics, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Network Protocols, Windows PowerShell, Cloud Services, Phishing, Security Information and Event Management, TCP/IP, Scripting, Cloud Platform System, Mitre Att&ck, Malware, HybridCloud, Cybercrime, Tenable Nessus, CIS Benchmarks, Purple Team (Cyber Security), Splunk, Servicenow, Vulnerability Analysis - **Published:** May 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=410d128ccb903d1c ## About the Role Do you have experience in Writing skills?, Do you have a High school diploma or GED?, * 5 years with a Bachelors degree or 9 years with a HS diploma/equivalent * Familiarity with compliance and audit frameworks: NIST CSF, 800-53, OMB M-21-31, CIS Benchmarks, STIGs * Knowledge of vulnerability scanning tools (e.g., Tenable Nessus) and CVE exposure analysis * Experience collaborating with cyber threat intelligence and/or red teams * Experience in digital forensics, malware analysis, or purple team operations * Experience with Case Management System (e.g., ServiceNow) * Experience with SIEM (e.g., Splunk) * Experience using SOAR platforms for alert triage and response automation * Solid understanding of Windows and Linux operating system internals and log analysis * Strong grasp of network protocols, TCP/IP, and common attack vectors * Familiarity with scripting (e.g., PowerShell, Python, Bash) and automation workflows * Experience with threat hunting, IOC analysis, or MITRE ATT&CK-based detection * Understanding of identity and access management (IAM) risks in cloud environments * Experience improving SOC processes, detection logic, architecture, or playbooks * Ability to communicate findings clearly-verbally and in writing-to technical and non-technical audiences * Must be a U.S. Citizen * Must be able to obtain and maintain the required agency clearance, * Active Public Trust ## Description We are seeking a highly motivated and experienced Cyber Security Specialist to support swing and night shift operations within our 100% remote 24/7/365 Security Operations Center (SOC). You will monitor, analyze, investigate, and respond to threats across hybrid cloud and on-prem environments. This role is ideal for analysts with a strong investigative mindset, technical depth, and a passion for continuous learning. Job Responsibilities: * Perform advanced EDR analysis, including alert triage, threat detection, behavioral rule tuning, IOC investigation, and endpoint telemetry enrichment. * Support EDR platform administration by managing agent health and deployment, maintaining integration with SIEM and other telemetry pipelines, coordinating policy updates, and partnering with SysAdmins to troubleshoot endpoint and infrastructure-level issues affecting EDR visibility. * Conduct digital forensics during incident response by acquiring, preserving, and analyzing endpoint artifacts (e.g., memory, disk, registry, logs); assist with root cause analysis and ensure forensic evidence in accordance with legal and procedural requirements. * Provide engineering-focused support on SOC architecture improvements to increase visibility, data fidelity, and detection capabilities across hybrid environments. * Perform threat detection, log analysis, and anomaly identification across on-premises and cloud workloads (AWS preferred). * Conduct initial incident response and assist with investigations into malware, phishing, lateral movement, privilege misuse, and data exfiltration. * Apply threat intelligence to enrich alerts and uncover TTPs using the MITRE ATT&CK framework. * Document investigative steps and evidence in the case management system and escalate incidents per SOPs. * Participate in threat hunting missions based on hypotheses, intel feeds, and environmental knowledge. * Collaborate with engineering, system administrators, and cyber stakeholders to contain and remediate threats. * Support compliance efforts by ensuring audit trails, access logs, and investigative artifacts are collected and preserved. * Stay current with emerging threats, vulnerabilities, and TTPs targeting cloud and hybrid infrastructures. * Maintain situational awareness through active monitoring of CTI sources, advisories, and vulnerability disclosures. ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)