Cyber Analyst

We are seeking a Cyber Intrusion Analyst to support a mission-critical Security Operations Center (SOC) responsible for protecting enterprise-level networks and systems. This position focuses on real-time cyber defense operations, incident detection and response, threat analysis, network monitoring, and security event investigation in a 24/7 operational environment.

The ideal candidate has experience working within a SOC, Cyber Defense, CSSP, or Computer Network Defense environment and is comfortable analyzing security events, investigating potential threats, and supporting mission-focused cyber operations.

Responsibilities Perform computer network incident detection, analysis, and response activities. Monitor and investigate alerts from SIEM and security monitoring platforms. Conduct real-time event triage and recommend mitigation actions. Analyze logs, network traffic, packet captures, NetFlow data, IDS/IPS alerts, and security telemetry. Identify, investigate, and characterize suspicious or malicious activity. Support enterprise cyber defense operations across Protect, Detect, Respond, and Sustain mission areas. Configure and monitor security tools including firewalls, IDS/IPS, and cyber defense appliances. Review and correlate security events from multiple data sources. Develop, tune, and optimize detection rules, countermeasures, and monitoring capabilities. Produce incident reports, trend analysis, and operational briefings. Collaborate with government stakeholders, engineers, and fellow analysts to maintain situational awareness and improve network security posture. Utilize scripting and automation to improve operational efficiency and analysis workflows., This position operates within a 24x7x365 Security Operations Center supporting mission-critical cyber operations. Analysts may be assigned to day, swing, or night shifts and will work alongside cybersecurity professionals responsible for protecting enterprise systems and networks against evolving cyber threats.

Active Secret Clearance required. Security+ certification required. Ability to obtain CySA+ or CEH within six months of hire. Minimum 2 years of Cyber Defense, Incident Response, or SOC analyst experience. Experience with SIEM technologies such as Splunk, Elastic, or similar platforms. Experience analyzing network traffic, logs, security events, and packet captures. Knowledge of IDS/IPS technologies and network security monitoring. Experience performing vulnerability assessments and cyber threat investigations. Familiarity with firewall administration, network hardening, and security policy implementation. Experience supporting Department of Defense environments. Strong analytical and problem-solving abilities., Active Top Secret Clearance. Experience within a CSSP or Computer Network Defense environment. CySA+, CEH, CISSP, GCIA, GCIH, or equivalent cybersecurity certifications. Experience with Python, Perl, Shell Scripting, or automation tools. Understanding of threat hunting methodologies and advanced intrusion detection techniques. Experience supporting 24/7 Security Operations Centers.

Technical Skills Splunk Elastic SIEM Technologies IDS/IPS Network Traffic Analysis Packet Capture Analysis Incident Response Cyber Defense Operations Vulnerability Assessment Python Shell Scripting Security Monitoring Firewall Administration Threat Analysis