Title: Cybersecurity Defense Analyst
Location: Alexandria, VA
Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph
Job Details:- Perform continuous monitoring and initial alert triage under established SOC procedures and analyst runbooks
- Perform cyber defense monitoring and analysis using security information from enterprise systems, networks, security sensors, firewalls, intrusion detection/prevention technologies, endpoint sources, and other available telemetry
- Analyze log files and network activity to identify anomalous or malicious behavior, determine potential security impact, and document investigative findings in the authorized case or ticketing system
- Perform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalation
- Conduct basic enrichment of alerts using available asset, user, network, vulnerability, and threat information before escalation
- Accurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases and shift-turnover requirements
- Escalate activity that exceeds established procedures or indicates increased risk, broader scope, or potential incident impact
- Participate in training, exercises, and qualification activities to build proficiency across SOC tools and investigative methods
Requirements:- Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
- Minimum two (2) years of relevant experience in addition to education level
- Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts
- Experience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools is desired
- Ability to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environment
- Must possess current DoD 8570 IAT II or IAM II certification
- Experience working in a DoD or IC environment desired
- Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph
