> Markdown version of [/jobs/ext/1951985-blue-team-lead-sr-cyber-defense-analyst](https://www.wearedevelopers.com/jobs/ext/1951985-blue-team-lead-sr-cyber-defense-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Blue Team Lead / Sr Cyber Defense Analyst

- **Company:** Indigo It
- **Location:** Fort Liberty, NC, United States
- **Experience:** Expert
- **Salary:** $125,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Information Technology Consulting, Computer Telephony Integration, Intrusion Detection and Prevention, Knowledge Management, Security Information and Event Management, EndPointSecurity, Snort (Software), Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Cyber Warfare, Blue Team (Cyber Security)
- **Published:** August 6, 2026
- **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17836583?backUrl=%2Fcareer%2F17836583%2FBlue-Team-Lead-Sr-Cyber-Defense-Analyst-North-Carolina-Fort-Bragg

## About the Role

* 7+ years experience leading cyber defense, threat hunting, or Security Operations Center (SOC) teams in a DoD or federal environment.
 * Strong knowledge of SIEM platforms, network and endpoint detection technologies, and threat detection methodologies.
 * Experience creating detection content using tools such as YARA, Snort, Suricata, and host-based security solutions.
 * Understanding of adversary tactics, techniques, and procedures (MITRE ATT&CK) and advanced persistent threat (APT) behaviors.
 * Active DoD Secret clearance
 * Desired certifications: Security+, CASP, CISSP

## Description

Founded in 2001, Indigo IT is an award winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers' technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. As a Veteran-Friendly employer, we are proudly partnered with the Virginia Values Veterans (V3) Program, and a recipient of the HIRE Vets Gold Medallion Award, which recognizes our commitment to recruiting our nation's Veterans. Recognized on the Inc. 5000 list of America's fastest growing companies in 2020 & 2021 and named as one of the 2022 Best Places
to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

The Blue Team Lead / Senior Cyber Defense Analyst is responsible for leading advanced cyber defense operations for an Army cyber contract. This role serves as the technical lead for threat detection, threat hunting, incident analysis, and detection engineering, with a focus on identifying and mitigating advanced persistent threats (APTs) and sophisticated cyber intrusions., * Lead the investigation and analysis of advanced cyber threats, suspected APT activity, and complex security incidents.

 * Plan and execute proactive threat hunting operations to identify malicious activity not detected by traditional security controls.
 * Develop, test, and maintain detection content, including SIEM correlation rules, YARA rules, Snort/Suricata signatures, and host-based detection policies.
 * Collaborate with Cyber Threat Intelligence (CTI) teams to validate and promote new detection signatures into the enterprise security monitoring environment.
 * Provide technical leadership during incident response activities and support containment, eradication, and recovery efforts.
 * Mentor and provide on-the-job training to Tier 1 and Tier 2 Cyber Defense Analysts, improving team capabilities and operational effectiveness.
 * Continuously refine detection strategies and recommend improvements to cyber defense processes, tools, and procedures.
 * Prepare technical reports, document findings, and communicate risks and recommendations to leadership.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)