Senior Cyber Security Analyst - Top Secret Clearance (SCI Eligib

• Ensure the safe and proper functional operation of the tool/tech stack and its components.
• Collect and document measures of performance per approved CONOPS.
• Analyze and document behaviors, characteristics, and attributes of a network’s baseline activity within steady-state operations.
• Analyze and investigate potential anomalies or outliers from established baseline.
• Analyze and identify misconfigurations, faults, and vulnerabilities within the network’s architecture, subcomponents, and utilized communication protocols.
• Determine root source of anomalies and extent of vulnerable findings for validation with system users and administrators.
• Document and report anomalies to appropriate channels for further investigation and notification.
• Document vulnerable findings and provide recommendations through appropriate channels that increase both security and operational capacity of the respective network.
• Recommend improvements to current operations for potential incorporation into the overall program.
• Collaborate with cross-functional teams to support incident response, system hardening, and policy development as needed.
• Additional duties as assigned

Mandatory Requirements: Top Secret Clearance (SCI Eligible)

Experience Level: Senior-Level (8+ years in cybersecurity with in-depth vulnerability analysis)

On-Site, hybrid, remote: On-Site, * Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field preferred. Equivalent work experience may be considered in lieu of a degree.

• A master’s degree is a plus.

Certifications:

• Must hold an IAT Level II certification as defined and described in DoDD 8570.01, 8570.01-M, and 8140.01-03, and as amended. (e.g., Security+ CE, CySA+, CCNA Security, GSEC).
• Must hold a CSSP Analyst certification as defined and described in DoDD 8570.01, 8570.01-M, and 8140.01-03, and as amended. (e.g., CEH, CySA+, GCIA, GCIH).
• Preferred: Advanced certifications such as CISSP (Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or similar.

Experience:

• Minimum 8 years in cybersecurity operations or analysis
• Minimum 3 years of experience with passive vulnerability detection techniques
• Experience supporting DoD or Intelligence Community networks

Technical Skills:

• Practical experience with firewalls, network TAPs, IDS/IPS, endpoint protection, and other network defense technologies
• Adept in evaluating network protocols utilizing network analyzers, such as Wireshark, Tshark, and tcpdump
• Experienced in analyzing network datasets, including Zeek and firewall logs, to support threat hunting and security investigations
• Experienced in leveraging data analysis platforms, such as Splunk, Kibana, and Arkime, to detect and analyze anomalous network activity
• Proficient in triaging Suricata alerts, tuning rules, and creating custom detections

Knowledge:

• In-depth understanding of network vulnerabilities and misconfigurations
• Strong knowledge of cybersecurity principles, adversary techniques, and detection/response strategies
• Experience working within the framework of a CONOPS or similar operational document
• Awareness of DoD cybersecurity frameworks (e.g., RMF, CMMC, NIST 800-53) and their application in secure system design and monitoring
• Knowledge of common enterprise network architectures and defense mechanisms
• In-depth understanding and experience in analyzing TCP/IP, DNS, HTTP/S, SSL/TLS, SMB, and RDP protocols to identify vulnerabilities, misconfigurations, and indicators of malicious activity

Soft Skills:

• Strong analytical and investigative mindset
• Excellent documentation and reporting skills
• Effective communicator with ability to explain technical issues to both technical and non-technical audiences
• Comfortable working independently and as part of a cross-functional team

• Salary: $165k- $180k
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
• We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms, $165,000 - $180,000

About JFL Consulting: With more than twenty years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com