Quick Overview
Seniority
Mid Senior
Employment type
Temporary/Casual
Work mode
Hybrid
Location
Springfield, VA, United States
Posted
Yesterday
DNS
Job Description
This role supports critical defensive cyber operations through targeted analysis and coordination. You will help protect national security networks from advanced persistent threats by identifying emerging threats, analyzing cyber activities, and delivering actionable incident responses to key stakeholders. Responsibilities include, but are not limited to:
- Provide detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities
- Characterize and analyze network traffic and system data to identify anomalous activity and potential threats to resources
- Perform security event and incident correlation using information gathered from a variety of sources within the enterprise
- Conduct cyber incident triage to determine scope, urgency, and potential impact; identify specific vulnerabilities and recommend expeditious remediation
- Track and document cyber incidents from initial detection through final resolution
- Analyze and assess damage to data and infrastructure resulting from cyber incidents
- Perform cyber incident trend analysis and reporting
- Work on a 24x7 Shift Work basis (4/10 shift schedule; hours dependent on location)
- Bachelor’s degree or 4+ years of additional IT experience in lieu of a degree
- 5+ years of cybersecurity experience
- IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security)
- Knowledge of common cybersecurity threats, attack techniques, vulnerabilities, and indicators of compromise (IOCs).
- Experience with SIEM (Security Information and Event Management) tools
- Experience monitoring and analyzing security events, network traffic, system logs, and other security telemetry to identify suspicious or anomalous activity.
- Ability to analyze security-related data and communicate findings clearly in written and verbal reports.
Preferred Qualifications
- CSSP-IR certification (CEH, CySA+)
- Experience analyzing network packet captures, firewall/proxy logs, DNS traffic, authentication logs, endpoint telemetry, and system events.
- Knowledge of the MITRE ATT&CK framework and ability to map observed activity to adversary tactics, techniques, and procedures (TTPs).
- Ability to work effectively in a fast-paced environment while managing multiple tasks and coordinating resources
- Strong interpersonal skills, including the ability to engage with senior management
- Must have a current/active TS/SCI with Polygraph clearance
- Must be able to remain in a stationary position 50% of the time
- Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentation
Similar jobs
- IB
Senior Security Engineer
NewIBM Corporation
Armonk, NY🇺🇸HybridYesterdayAWSOAuthActive Directory+5Technology - VI
Onsite Position: Security Engineer with Financial or Banking exp in New York, NY (Local candidates only)
NewVisionsoft International
New York, NY🇺🇸On-siteYesterdayOWASPAngularC#+6Technology - ER
Security Analyst - Columbia, South Carolina - Long Term - W2 role ( Must be current resident of South Carolina)
NewERPA
Columbia, SC🇺🇸HybridYesterdayTechnology - NI
Cyber Network Forensic Analyst IV with Security Clearance
NewNightwing
Arlington, VA🇺🇸On-siteYesterdaySplunkTCP/IPDNS+1Technology - RT
Sr. Security Engineer, Insider Threat Detection & Response
NewRussell, Tobin & Associates
San Francisco, CA🇺🇸$115 - $137/hrRemoteYesterdaySQLAWSPythonTechnology - MT
SAP Security Consultant
NewMAK Technologies, LLC
United States🇺🇸RemoteYesterdayTechnology - NI
(Cyber) Incident Management Analyst - Weekend Day Shift with Security Clearance
NewNightwing
Arlington, VA🇺🇸$77k - $163k/yrOn-siteYesterdayPL/SQLSQLTechnology - NI
(Cyber) Incident Management Analyst - Weekend Night Shift with Security Clearance
NewNightwing
Arlington, VA🇺🇸On-siteYesterdayPL/SQLSQLTechnology - RD
SOAR Automation Engineer
Randstad Digital
DC🇺🇸$55 - $60/hrHybrid3 weeks agoAWSSplunkAgile+3Technology - RT
Sr. Security Engineer, Threat Detection and Response
NewRussell, Tobin & Associates
San Francisco, CA🇺🇸$115 - $137/hrRemoteYesterdaySQLAWSPandas+1Technology - EG
Sr. Security Engineer (Trellix)
NewEliassen Group
Washington, DC🇺🇸$140k - $170k/yrOn-siteYesterdayEncryptionPowerShellPython+1Technology - AM
Information Systems Security Officer (ISSO) 2 with Security Clearance
NewAmentum
Hanover, MD🇺🇸$160k - $200k/yrHybrid2 days agoPenetration TestingTechnology