Cybersecurity Analyst
Role details
Job location
Tech stack
Job description
- Analyze network traffic and security telemetry including NetFlow, custom application logs, intrusion detection system (IDS) alerts, and full packet capture (PCAP) data to identify malicious activity.
- Conduct cyber threat hunting and investigations using intelligence reporting, open-source intelligence (OSINT), and threat feeds.
- Identify, investigate, and analyze indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs).
- Correlate data from SIEMs, sensors, and system logs to detect adversary campaigns and anomalous behavior.
- Develop written analytical products and risk assessments to improve the organization's security posture.
- Support the creation and refinement of operational frameworks and standard operating procedures.
- Assess threats and vulnerabilities to recommend mitigation strategies.
- Produce attack lifecycle visualizations and technical briefings to communicate findings.
Requirements
- Experience with SIEM tools to monitor networks, such as Splunk or similar platforms.
- An active IAT Level II or III certification.
- Demonstrated experience in cyber threat hunting and threat intelligence analysis, including identifying adversary activity, TTPs, and IOCs.
- Proficiency in network traffic analysis (PCAP, NetFlow) with a strong understanding of TCP/IP and the OSI model. Experience with tools like Wireshark is desirable.
- Experience in incident response and cybersecurity analysis, including investigating potential compromises and performing risk assessments.
- Familiarity with frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
- Depending on the specific labor category, a combination of education and experience is required:
- MA with 6-10 years of experience.
- BA with 8-12 years of experience.
- AA with 10-14 years of experience.
- No degree with 12-16 years of experience.
Preferred Qualifications
- Experience supporting DISN or other large-scale enterprise networks.
- Experience building cybersecurity dashboards, metrics, and trend reporting.
- Knowledge of intelligence-driven defense methodologies.
- Experience briefing senior leadership.
- Advanced certifications such as CASP+, CISSP, or GSLC.
Benefits & conditions
Must be eligible to obtain and maintain a DoD Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at
Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.