• Monitor, detect, and report suspected cyber threats, security breaches, anomalous behavior, and unauthorized activities.
• Analyze network traffic, system logs, and security data to identify potential threats and unusual patterns.
• Correlate security events and incident data from multiple enterprise sources to support threat detection and investigation.
• Perform incident triage to assess scope, severity, and business impact; identify vulnerabilities and recommend immediate remediation actions.
• Manage and document cyber incidents throughout the entire incident response lifecycle, from detection through resolution.
• Evaluate and analyze the impact of security incidents on organizational data, systems, and infrastructure.
• Conduct trend analysis and develop reports to identify recurring threats, emerging risks, and opportunities for security improvement.

• Active TS/SCI CI Polygraph
• Bachelors degree and 4+ years of related experience with AV/network infrastructure
• Must have active IAT II certification; Security+ CE, GIAC Security Essentials Certification (GSEC), Security Certified Network Professional (SCNP), System Security Certified Practitioner (SSCP), RHCSA Red Hat Certified System Administrator, RHCDS Red Hat Certified Data Center Specialist
• CSSP-IT Certification highly preferred (CEH)
• Familiarity with COTS technologies used in a Cybersecurity Operations Center environment is desired.
• Working knowledge of current COTS Cybersecurity technologies/ SIEMs (i.e. Splunk, Wireshark, Solarwinds, Sentinel)
• Understanding of database and operating system security.
• Familiarity with the latest security principles, techniques, and protocols.

• Total compensation based on experience level - $110,000 - $130,000+ based on experience level
• Full Benefits: PTO, Paid Holidays, Sick leave as required by state laws, Medical, Dental, and Vision, 401k
• Training & development opportunities, certification reimbursement
• Long term program, contract mobility through Zachary Piper Solutions

LI-MK1 #LI-Onsite

Keywords: Authentication, Botnet, TS/SCI, polygraph, top secret/sci, CI polygraph, intelligence, IPS, IDS, intrusion detection, qradar, sentinel, defender, opentowork, W2, hiring, intelligence, SOC, incident response, Data Breach, DDoS (Distributed Denial of Service), Encryption, Firewall, Malware, Phishing, Ransomware, Social Engineering, Trojan, Vulnerability, Zero-Day Exploit, Advanced Persistent Threat (APT), Cybersecurity Framework, Intrusion Detection System (IDS), Penetration Testing, Security Information and Event Management (SIEM), Threat Intelligence, Virtual Private Network (VPN), Splunk, wireshark, tenable, ACAS, cyber, cyber security, cybersecurity, security, networking, network, network infrastructure, SOC, security operations center, IOC, indicators of compromise, shift, onsite, on-site, pentest, COTS, solarwinds, Tanium, arcsight, forescout, reporting, documentation, SOPs, MITRE, MITRE ATT&CK, DoD, department of defense, clearance, security clearance, sentinel, wireshark, poly, firewalls, virginia, protocols, network security