Cyber Defense Specialist

Job ID: 2617323
Location: Colorado Springs, CO, US
Date Posted: 2026-09-28
Category: Cyber
Subcategory: Cybersecurity Spec
Schedule: Full-Time
Shift: Day Job
Travel: No
Minimum Clearance Required: TS.SCI
Clearance Level Must Be Able to Obtain: None
Potential for Remote Work: ORA_ON_SITE
Description
Join SAIC's team and play a pivotal role in defending North America. We are seeking an experienced Cyber Defense Specialist to streamline operations and lead advanced cybersecurity infrastructure defense for the critical North American Aerospace Defense Command and United States Northern Command (N-NC) Information Technology (IT) Enterprise Services (NITES) contract. In this role, you will be responsible for protecting and hardening critical enterprise identity services, domain environments, and server systems against advanced threats. You will play a vital role in analyzing Active Directory configurations, responding to Cyber Tasking Orders (CTAs/CTASKORDs), performing proactive threat hunting, and executing log analysis and vulnerability remediation.
While your primary focus is dedicated to advanced, security-centric tasks, you will maintain hands-on experience with Red Hat Enterprise Linux (RHEL) systems and Nutanix Hyper-Converged Infrastructure (HCI) to secure the host platforms of our cybersecurity tools. Additionally, you will augment and support the core System Administrator team during high-urgency surge patching or rapid configuration requirements, ensuring critical security objectives are met while maintaining infrastructure stability and optimization.
Responsibilities:
The selected candidate will be responsible for the following:

• Analyze, secure, and recommend hardening actions for Active Directory configurations, identity services, and enterprise domain environments to mitigate risks such as credential theft, lateral movement, and persistence.
• Track, coordinate, and execute rapid, intensive vulnerability remediation and patching efforts in response to Cyber Tasking Orders (CTAs/CTASKORDs), emerging zero-day threat mandates, and JFHQ-DODIN directives.
• Perform proactive threat hunting and forensic-level log analysis across specialized security infrastructure, host servers, and network devices to detect and neutralize advanced adversary tactics.
• Provide specialized security configuration, patching, and maintenance support for Red Hat Enterprise Linux (RHEL) servers and Nutanix Hyper-Converged Infrastructure (HCI) hosting cybersecurity tools.
• Augment the core System Administrator team during high-priority security surges, operational patching, or complex virtualization infrastructure configuration requirements.
• Conduct in-depth technical research on unfamiliar vulnerabilities, zero-day threat landscapes, and exploit techniques to proactively protect monitoring systems and core IT infrastructure from service outages.
• Implement strict DISA STIGs and apply kernel-level operating system hardening across diverse Windows and Linux server platforms.

Qualifications
Required Qualifications:

• Active TS/SCI security clearance.
• Certification required per DoDD 8140.03, Intermediate Level (e.g., Security+ CE, CySA+, GSEC, CND, or equivalent).
• BS or equivalent work experience in Cybersecurity, Information Technology, or a related field.
• 8+ years of overall IT administration or cybersecurity experience.
• 3+ years of practical experience maintaining, patching, and securing Red Hat Enterprise Linux (RHEL) operating systems and/or Nutanix virtualized environments.
• Flexible, independent, self-motivated, and punctual.

Desired Qualifications:

• Direct experience tracking, reporting, and responding to Cyber Tasking Orders (CTAs/CTASKORDs) and JFHQ-DODIN directives within a DoD environment.
• Deep knowledge of credential theft mitigation, preventing lateral movement, and eliminating persistent threats within Active Directory and domain environments.
• Relevant technical vendor certifications such as Red Hat Certified System Administrator (RHCSA) or Nutanix Certified Professional (NCP).
• Familiarity with the North American Aerospace Defense Command and United States Northern Command (N-NC) IT enterprise architecture.
• In-depth understanding of network security appliances, SIEM solutions, and enterprise monitoring tools (e.g., SolarWinds, Cisco ISE).
• Demonstrated hands-on experience in cyber defense tasks, including threat hunting, log analysis (SIEM), vulnerability remediation, and Active Directory/domain hardening.

Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
SAIC is a premier technology integrator providing full life cycle services and solutions in the technical, engineering, intelligence, and enterprise information technology markets. SAIC is Redefining Ingenuity through its deep customer and domain knowledge to enable the delivery of systems engineering and integration offerings for large, complex projects. SAIC's approximately 15,000 employees are driven by integrity and mission focus to serve customers in the U.S. federal government. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $4.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see .