Cyber Network Defense Analyst

Quantum Science Solutions
Arlington, VA, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

JavaScript (Programming Language) Microsoft Windows Amazon Web Services Microsoft Azure Bash Shell Software as a Service Cloud Computing Cyber Security Computer Engineering Computer Forensics Digital Forensics Infrastructure as a Service (IaaS)
+13 more
Intrusion Detection and Prevention Python (Programming Language) Network Security Microsoft Security Essentials Platform as a Service (PAAS) Windows PowerShell Google Cloud Cloudformation Kubernetes Information Technology Cybercrime Terraform Docker

Job description

Quantum Science Solutions (QSS) is seeking a Cyber Network Defense Analyst (Cloud Forensics) to support advanced incident response, digital forensics, and threat hunting operations for federal agencies and critical infrastructure organizations.

This role focuses on investigating cloud and hybrid identity compromises, conducting forensic analysis across cloud platforms, and supporting cyber incident response activities in complex enterprise environments., * Conduct forensic investigations across Microsoft 365, Azure/Entra ID, AWS, GCP, and SaaS platforms

  • Analyze cloud logs, telemetry, and activity data to identify attacker activity and reconstruct timelines
  • Investigate cloud and hybrid identity incidents, persistence mechanisms, and data exfiltration events
  • Develop detection logic, automation, and investigative workflows using cloud-native security tools
  • Produce technical reports, findings, and containment recommendations
  • Support cloud threat hunting, incident response, and forensic capability development

Requirements

  • U.S. Citizenship
  • Active TS/SCI Clearance and ability to obtain DHS Entry on Duty (EOD) Suitability
  • 5+ years of cyber forensics, incident response, or threat hunting experience
  • Strong understanding of SaaS, PaaS, IaaS, and hybrid identity environments
  • Experience with Microsoft 365, Azure/Entra ID, AWS, and cloud identity security
  • Experience acquiring and analyzing forensic evidence and reporting findings
  • Strong analytical, investigative, and communication skills

Preferred Skills

  • Experience with PowerShell, Python, Bash, or JavaScript
  • Knowledge of cloud attack techniques and threat detection methodologies
  • Experience with Microsoft Defender, Sentinel, GuardDuty, Chronicle, or similar tools
  • Familiarity with Terraform, Kubernetes, Docker, or CloudFormation
  • Experience supporting cloud-focused DFIR or cybersecurity operations, * Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or related field OR

  • High School Diploma and 7+ years of directly relevant experience

Desired Certifications

  • GCLD, GCFR, GCFA, GCFE, GCIH
  • EnCE, CFCE, or CCE
  • CISSP or CCSP
  • AWS or Microsoft Security Certifications

Benefits & conditions

  • Competitive compensation with annual performance bonuses
  • Premium Medical, Dental, & Vision coverage
  • Generous PTO plus Federal Holidays
  • 401(k) with company match
  • Professional development and certification support

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on clearancejobs.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · WWC 2025

1:34 min

Essential commands for running and testing Terraform configurations

Hennie Francis · LIVE

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · WWC 2022

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

2:34 min

Docker sandbox architecture and microVM environment integration

Manuel de la Peña Manuel de la Peña · WWC Europe 2026

Videos

See all

Related articles

See all