Why this role stands out
This hybrid role offers a significant opportunity to directly contribute to national security by defending critical networks, allowing you to hone your analytical and incident response skills. You'll thrive here if you have a strong cybersecurity background and enjoy tackling complex threats, making this an excellent chance to advance your career protecting vital infrastructure.
Quick overview
Job description
This role supports critical defensive cyber operations through targeted analysis and coordination. You will help protect national security networks from advanced persistent threats by identifying emerging threats, analyzing cyber activities, and delivering actionable incident responses to key stakeholders. Responsibilities include, but are not limited to:
- Provide detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities
- Characterize and analyze network traffic and system data to identify anomalous activity and potential threats to resources
- Perform security event and incident correlation using information gathered from a variety of sources within the enterprise
- Conduct cyber incident triage to determine scope, urgency, and potential impact; identify specific vulnerabilities and recommend expeditious remediation
- Track and document cyber incidents from initial detection through final resolution
- Analyze and assess damage to data and infrastructure resulting from cyber incidents
- Perform cyber incident trend analysis and reporting
- Work on a 24x7 Shift Work basis (4/10 shift schedule; hours dependent on location)
- Bachelor’s degree or 4+ years of additional IT experience in lieu of a degree
- 5+ years of cybersecurity experience
- IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security)
- Knowledge of common cybersecurity threats, attack techniques, vulnerabilities, and indicators of compromise (IOCs).
- Experience with SIEM (Security Information and Event Management) tools
- Experience monitoring and analyzing security events, network traffic, system logs, and other security telemetry to identify suspicious or anomalous activity.
- Ability to analyze security-related data and communicate findings clearly in written and verbal reports.
Preferred Qualifications
- CSSP-IR certification (CEH, CySA+)
- Experience analyzing network packet captures, firewall/proxy logs, DNS traffic, authentication logs, endpoint telemetry, and system events.
- Knowledge of the MITRE ATT&CK framework and ability to map observed activity to adversary tactics, techniques, and procedures (TTPs).
- Ability to work effectively in a fast-paced environment while managing multiple tasks and coordinating resources
- Strong interpersonal skills, including the ability to engage with senior management
- Must have a current/active TS/SCI with Polygraph clearance
- Must be able to remain in a stationary position 50% of the time
- Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentation
Similar jobs
- RA

Embedded Security Software Engineer I (Onsite)Recently posted
Raytheon · Tewksbury, MA · Hybrid 🇺🇸
GitScrumC+++5Technology$57.2k - $108.8k/yr - RA

Senior Embedded Software Security Engineer- S3ERecently posted
Raytheon · Tucson, AZ · Hybrid 🇺🇸
ScrumC++Kanban+4Technology$86.8k - $165.2k/yr - LS
Cyber Software Engineer (Security Tooling) - 50% telework with Security ClearanceRecently posted
Linchpin Software · Chantilly, VA · Remote 🇺🇸
DjangoSvelteGit+10Technology$130k - $230k/yr - TA

Application Security Engineer III with Security ClearanceRecently posted
True Anomaly. Inc. · Denver, CO · On-site 🇺🇸
ElixirErlangGCP+17Technology$145k - $205k/yr - LT

Specialist, Cyber Infrastructure Systems Engineer (Systems Administrator)Recently posted
L3Harris Technologies · Colorado Springs, Colorado · Hybrid 🇺🇸
SAFeGitScrum+10Technology$80.5k - $149.5k/yr - DS

Embedded Software Security Engineer II (S3E)Recently posted
Disability Solutions · Provo, UT · Hybrid 🇺🇸
C++KanbanPerl+3Technology$68.9k - $131.1k/yr - RA

Embedded Software Security Engineer II (S3E)Recently posted
Raytheon · Provo, UT · Hybrid 🇺🇸
C++KanbanPerl+3Technology$68.9k - $131.1k/yr - DS

Senior Embedded Software Security Engineer- S3ERecently posted
Disability Solutions · Miami, FL · Hybrid 🇺🇸
ScrumC++Kanban+4Technology$86.8k - $165.2k/yr - IL

iOS Vulnerability ResearcherRecently posted
Interrupt Labs · Arlington, Virginia · Remote 🇺🇸
RustSwiftC+++2TechnologySalary not listed - MC

Senior Information Security AnalystRecently posted
MCKESSON · Irving, Texas · On-site 🇺🇸
GCPAWSAzureTechnology$169.9k - $179.3k/yr - EJ

Cyber Threat Intelligence Engineer IVRecently posted
Edward Jones · Saint Louis, Missouri · On-site 🇺🇸
SQLPythonData AnalysisTechnologySalary not listed - MI

Site Security Manager - Michels Infrastructure Solutions, Inc.Recently posted Auto Apply
Michels Corporation · Cheyenne · Hybrid 🇺🇸
FiberMicrosoft OfficeCompliance+3Salary not listed