Cyber Countermeasure Specialist with Security Clearance

Overview
We are seeking a Cyber Countermeasure Specialist to support mission-critical cyber defense operations within a highly secure environment. This role is responsible for engineering, deploying, and maintaining defensive cyber capabilities designed to detect, contain, and mitigate advanced threats across enterprise and tactical networks. The ideal candidate has hands-on experience with network defense, incident response, detection engineering, security sensor tuning, and traffic analysis.

This position offers the opportunity to support high-visibility operations protecting sensitive systems and infrastructure. Responsibilities
Engineer, deploy, validate, and maintain defensive cyber countermeasures and detection capabilities. Configure and tune security monitoring platforms and network sensors to improve threat detection accuracy. Develop, test, and maintain custom detection content including IDS/IPS rules, signatures, scripts, and analytics. Create and maintain incident response, containment, and recovery playbooks.

Analyze network traffic and security events to identify malicious activity and emerging threats. Support incident response efforts, including system isolation, threat containment, and eradication activities. Investigate security alerts and translate findings into actionable defensive measures. Collaborate with operations, engineering, and cybersecurity teams to improve overall security posture. Validate log ingestion and monitoring pipelines to ensure visibility across critical systems. Maintain compliance with security policies, procedures, and classification requirements.

Document security processes, configurations, and operational procedures. Required Qualifications
Level II
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related field and 2+ years of relevant experience; OR
Associate degree and 4+ years of relevant experience; OR
6+ years of applicable professional or military cyber experience.

Level III
Bachelor's degree in a technical discipline and 4+ years of relevant experience; OR
Associate degree and 6+ years of relevant experience; OR
8+ years of applicable professional or military cyber experience.

Required Skills
Active Top Secret clearance with ability to obtain SCI eligibility.
Security+ CE, CySA+, CEH, GSEC, CND, CISSP, CASP+, GCIA, GCIH, or equivalent DoD-approved certification.
Cyber defense and detection engineering experience.
Incident response and threat containment experience.
Network security and traffic analysis expertise. Experience with:
Elastic
Zeek/Corelight
YARA
Snort
Suricata
Palo Alto security technologies Strong understanding of:
TCP/IP
DNS
TLS
BGP
IPsec
Firewalls
SD-WAN technologies
Experience using network analysis tools such as Wireshark and tcpdump.

Preferred Qualifications
Experience supporting Security Operations Centers (SOCs).
Detection engineering and security content development experience.
Familiarity with log aggregation and SIEM platforms.
Experience developing automated security workflows and playbooks.
Additional cybersecurity certifications. Work Environment
100% on-site.
Secure operational environment.
Collaboration with cybersecurity, network operations, and engineering teams.
Opportunity to support high-priority defense-focused cyber operations.