Cyber Countermeasure Specialist

We are seeking a Cyber Countermeasure Specialist to support mission-critical cyber defense operations within a highly secure environment. This role is responsible for engineering, deploying, and maintaining defensive cyber capabilities designed to detect, contain, and mitigate advanced threats across enterprise and tactical networks.

The ideal candidate has hands-on experience with network defense, incident response, detection engineering, security sensor tuning, and traffic analysis. This position offers the opportunity to support high-visibility operations protecting sensitive systems and infrastructure., Engineer, deploy, validate, and maintain defensive cyber countermeasures and detection capabilities. Configure and tune security monitoring platforms and network sensors to improve threat detection accuracy. Develop, test, and maintain custom detection content including IDS/IPS rules, signatures, scripts, and analytics. Create and maintain incident response, containment, and recovery playbooks. Analyze network traffic and security events to identify malicious activity and emerging threats. Support incident response efforts, including system isolation, threat containment, and eradication activities. Investigate security alerts and translate findings into actionable defensive measures. Collaborate with operations, engineering, and cybersecurity teams to improve overall security posture. Validate log ingestion and monitoring pipelines to ensure visibility across critical systems. Maintain compliance with security policies, procedures, and classification requirements. Document security processes, configurations, and operational procedures.

Level II Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related field and 2+ years of relevant experience; OR Associate degree and 4+ years of relevant experience; OR 6+ years of applicable professional or military cyber experience. Level III Bachelor’s degree in a technical discipline and 4+ years of relevant experience; OR Associate degree and 6+ years of relevant experience; OR 8+ years of applicable professional or military cyber experience., Active Top Secret clearance with ability to obtain SCI eligibility. Security+ CE, CySA+, CEH, GSEC, CND, CISSP, CASP+, GCIA, GCIH, or equivalent DoD-approved certification. Cyber defense and detection engineering experience. Incident response and threat containment experience. Network security and traffic analysis expertise.

Experience with: Elastic Zeek/Corelight YARA Snort Suricata Palo Alto security technologies

Strong understanding of: TCP/IP DNS TLS BGP IPsec Firewalls SD-WAN technologies Experience using network analysis tools such as Wireshark and tcpdump., Experience supporting Security Operations Centers (SOCs). Detection engineering and security content development experience. Familiarity with log aggregation and SIEM platforms. Experience developing automated security workflows and playbooks. Additional cybersecurity certifications.