CompTIA Cybersecurity Analyst

This role supports a large enterprise Department of Defense program by providing real-time cyber intrusion analysis within a high-visibility Security Operations Center. You will detect, investigate, and respond to network security incidents, working closely with Cyber Defense Service Provider (CND-SP/CSSP) teams to protect mission-critical systems and networks. As a technical leader within the team, you will help maintain the integrity and security of enterprise-wide environments, guide the use of monitoring tools, and contribute to the development and tuning of countermeasures against emerging threats., * Work closely with Government counterparts to provide expert guidance within the Computer Network Defense Service Provider (CND-SP) area, ensuring alignment with mission needs and security objectives.

• Provide comprehensive CND reporting, including trends, responses, mitigations, analysis, and information dissemination to leadership and mission partners.
• Deliver command and control (C2) support and situational awareness for all CND activities across Protect, Detect, Respond, and Sustain functions.
• Serve as a technical leader within the Cyber Security Service Provider (CSSP) team, responsible for maintaining the integrity and security of enterprise-wide systems and networks.
• Provide technical leadership to CND teams by supporting security initiatives through predictive and reactive analysis and clearly articulating emerging trends and threats to leadership and staff.
• Perform computer network incident detection and response activities to detect, correlate, identify, and characterize anomalous activity that may indicate threats to the enterprise.
• Monitor various security tools and applications, primarily Splunk and Elastic, for potential malicious activities and investigate associated alerts or indicators.
• Develop and recommend courses of action, including mitigation strategies, based on findings from security tools, logs, and network traffic analysis.
• Conduct analysis of low-level or “low and slow” events to identify unauthorized activity using exploratory problem-solving and self-learning techniques.
• Perform near real-time event triage and analysis, which may result in network traffic validation or the creation of incident reports for mission partners.
• Utilize formal monitoring policies and procedures, including DoD-approved network monitoring and traffic analysis tools, to identify suspicious, anomalous, or malicious network traffic on a 24/7/365 basis.
• Review and analyze available logs in a timely manner to detect intrusions and notify mission partners of relevant activity through formal reporting processes.
• Apply, develop, tune, and distribute or optimize new and existing countermeasures or guidance to prevent or mitigate potential cyber event impacts whenever possible.
• Perform detailed network traffic analysis using raw packet data, netflow, IDS, IPS, and custom sensor output to identify and understand security events.
• Configure and manage firewalls, IDS/IPS, and other security appliances to support Protect, Defend, Respond, and Sustain activities.
• Audit network traffic, harden devices, and implement security policies to enhance the overall security posture.
• Use command-line scripting (such as PERL, Python, and Shell) to automate tasks, streamline analysis, and improve operational efficiency.
• Support DOD-related projects or programs by providing cyber incident handling expertise and real-time analysis.
• Collaborate with other SOC analysts across multiple shifts to ensure continuous monitoring and consistent incident handling coverage.

Triage NetFlow Auditing Firewall Scripting Hardening Operations Leadership Mentorship Mitigation Shell Script Communication Cyber Defense Cyber Security Security Tools Problem Solving Packet Analyzer Network Security Secret Clearance Traffic Analysis Security Policies Incident Response CompTIA Security+ Computer Networks Incident Reporting Business Valuation Network Monitoring Reporting Processes Technical Leadership Top Secret Clearance Continuous Monitoring Full Stack Development Command-Line Interface Business Transformation Certified Ethical Hacker Computer Network Defense Network Traffic Analysis Vulnerability Assessments Process Driven Development Perl (Programming Language) Python (Programming Language) CompTIA Cybersecurity Analyst (CySA+) Security Information And Event Management (SIEM), * At least 4 years of overall professional experience, preferably combined with a bachelors degree.

• Active Secret clearance, with an active Top Secret clearance preferred.
• Minimum of 2 years of Computer Network Defense (CND) analysis experience, including hands-on use of SIEM tools such as Splunk or other SIEM platforms.
• Prior experience performing CND duties across Protect, Defend, Respond, and Sustain functions, including configuring firewalls, IDS/IPS, auditing network traffic, hardening devices, and implementing security policies.
• Demonstrated experience monitoring IDS and computer defense appliances, specifically using tools such as Splunk and Elastic.
• Experience evaluating and interpreting packet captures and network traffic to identify security incidents.
• Proficiency with command-line scripting, particularly in PERL, Python, and/or Shell scripting, to automate operational and analytical tasks.
• Prior experience supporting Department of Defense-related projects or programs.
• Ability and willingness to work assigned shifts, including day, swing, or night schedules in a 24/7/365 SOC environment.
• Strong incident response, cyber security, and vulnerability assessment skills, including familiarity with SIEM-driven workflows.
• Possession of Security+ (or equivalent baseline security certification) in combination with a Top Secret clearance as a core requirement for the role.

Additional Skills and Qualifications

• Ability to obtain CYSA+ or CEH certification within 6 months of hire; holding these or other advanced cyber certifications at the time of hire is a strong plus.
• Experience working in a high-tempo Security Operations Center (SOC) or Cyber Defense environment supporting enterprise networks.
• Familiarity with DoD network monitoring and traffic analysis tools and formal monitoring policies and procedures.
• Experience conducting analysis of low-level, “low and slow” events to uncover stealthy or persistent threats.
• Strong analytical, problem-solving, and self-learning capabilities to investigate complex or ambiguous security events.
• Effective communication skills to clearly articulate findings, trends, and recommendations to leadership, peers, and mission partners.
• Ability to collaborate in a team environment and provide technical leadership or mentorship to other analysts.
• Comfort working with structured reporting processes and formal incident documentation for mission partners.
• Experience working with or within Cyber Security Service Provider (CSSP) or CND-SP environments is beneficial., Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors., Splunk Triage NetFlow Auditing Firewall Scripting Hardening Operations Leadership Mentorship Mitigation Shell Script Communication Cyber Defense Cyber Security Security Tools Problem Solving Packet Analyzer Network Security Secret Clearance Traffic Analysis Security Policies Incident Response CompTIA Security+ Computer Networks Incident Reporting Business Valuation Network Monitoring Reporting Processes Technical Leadership Top Secret Clearance Continuous Monitoring Full Stack Development Command-Line Interface Business Transformation Certified Ethical Hacker Computer Network Defense Network Traffic Analysis Vulnerability Assessments Process Driven Development Perl (Programming Language) Python (Programming Language) CompTIA Cybersecurity Analyst (CySA+)

We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That’s the power of true partnership. TEKsystems is an Allegis Group company., Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.