cyber defense analyst

Sentar

<div>Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.
Sentar is seeking a Cyber Defense Analyst (Tier 1) in Quantico, VA!
Role Description:
The Cyber Defense Analyst (Tier 1) will provide 24/7/365 cybersecurity monitoring and detection for the government enterprise network. As a Cyber Defense Analyst, you will leverage advanced tools and methodologies to identify malicious activities, mitigate threats, and safeguard critical systems. This is a fast-paced and high-impact role in a mission-critical environment.
The selected applicant will perform a variety of activities including but not limited to:
<ul><li>Continuous Network Monitoring: Detect and analyze malicious and anomalous activities using advanced cybersecurity tools such as Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the DoD&rsquo;s Joint Regional Security Stack (JRSS).</li>
<li>Detection Playbooks: Execute up to 40 detection use cases daily, documenting results in the government&rsquo;s play tracker system.</li>
<li>Incident Escalation: Submit incident reports with all required details to the government&rsquo;s incident management system, maintaining a minimum 80% acceptance rate.</li>
<li>Red Team Interaction: Collaborate with Red Teams to validate detection capabilities and improve response processes.</li>
<li>Documentation and Updates: Annually update monitoring tactics, techniques, and procedures (TTPs), ensuring alignment with the latest cybersecurity best practices.</li>
<li>Training: Prepare and deliver quarterly courses on Division-specific TTPs, achieving high satisfaction ratings on government-approved surveys.</li>
<li>CSSP Accreditation Support: Provide documentation and technical support to maintain the government&rsquo;s CSSP accreditation per DoD standards.</li>
</ul>
Qualifications:
Clearance Level: Secret
Education: N/A
Experience:
<ul><li>DODD 8570 IAT Level II Certification.</li>
<li>CSSP Analyst Certification.</li>
<li>One (1) year of experience in cybersecurity monitoring or related roles.</li>
<li>Familiarity with enterprise monitoring tools and cybersecurity frameworks.</li>
<li>Strong analytical skills for identifying and escalating potential threats</li>
<li>Proficiency in documenting incidents and maintaining reporting accuracy</li>
<li>Excellent problem-solving abilities and attention to detail.</li>
</ul>
Benefits at Sentar:
Our unique ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.
<ul><li>Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options</li>
<li>Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options</li>
<li>Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees</li>
<li>Generous 401(k) match</li>
<li>Competitive PTO plan that graduates quickly with years of service</li>
<li>Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty</li>
<li>Mental health awareness programs</li>
<li>Tuition reimbursement</li>
<li>Professional development reimbursement</li>
<li>Recognition and Awards programs</li>
</ul>
If you are not ready to apply for this position, submit your resume here to join our talent community. We'll keep you updated occasionally on new job opportunities.
Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities
Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.
We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at recruiting@sentar.com. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.
Build, Innovate, Secure Your Career at Sentar.</div>

Cyber Defense Analyst (Tier 1)

Google

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.</li>
<li>Certification in one or more of the following: CompTIA Security+, CompTIA Network+, ISC2 (CISSP), SANS-GIAC certification (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN, GWAPT), Cisco (CCNA), or EC-Council (CEH, LPT).</li>
<li>5 years of experience assessing and developing cybersecurity solutions across multiple security domains.</li>
<li>Experience managing incident response activities.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Experience developing executive stakeholder client relationships to achieve project/long-term objectives. 
</li>
<li>Understanding of security controls for common platforms and devices, including Linux and network equipment.</li>
<li>Ability to communicate in Arabic fluently as this is a client facing role.</li>
<li>Excellent written and verbal communication skills. 
</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats. 
 
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Identify issues in customer Cyber Defense Centers, formulate strategies for improvement, plan the implementation of improvements, and execute or oversee plans to completion.</li>
<li>Advise on Cyber Defense Center, Computer Security Incident Response Team, and Security Operations Center management activities, including technical solutions.</li>
<li>Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operations Center incident detection and response capabilities.</li>
<li>Develop client relationships with executive stakeholders to achieve projects and objectives; engage and collaborate with client stakeholders within the customer environment to drive resolution for security issues.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Cyber Defense Principal Analyst, Mandiant, Google Cloud

<div>
 
 Minimum qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
 </li>
 <li>
 Certification in one or more of the following: CompTIA Security+, CompTIA Network+, ISC2 (CISSP), SANS-GIAC certification (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN, GWAPT), Cisco (CCNA), or EC-Council (CEH, LPT).
 </li>
 <li>
 5 years of experience assessing and developing cybersecurity solutions across multiple security domains.
 </li>
 <li>
 Experience managing incident response activities.
 
 
 </li>
 </ul>
 
 Preferred qualifications:
 
 
 
 <ul>
 <li>
 Experience developing executive stakeholder client relationships to achieve project/long-term objectives.
 </li>
 <li>
 Understanding of security controls for common platforms and devices, including Linux and network equipment.
 </li>
 <li>
 Ability to communicate in Arabic fluently as this is a client facing role.
 </li>
 <li>
 Excellent written and verbal communication skills.
 
 
 </li>
 </ul>
 
 About the job
 
 As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
 
 
 As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Identify issues in customer Cyber Defense Centers, formulate strategies for improvement, plan the implementation of improvements, and execute or oversee plans to completion.
 </li>
 <li>
 Advise on Cyber Defense Center, Computer Security Incident Response Team, and Security Operations Center management activities, including technical solutions.
 </li>
 <li>
 Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operations Center incident detection and response capabilities.
 </li>
 <li>
 Develop client relationships with executive stakeholders to achieve projects and objectives; engage and collaborate with client stakeholders within the customer environment to drive resolution for security issues.
 
 
 
 </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>

BCMC

<div>The DHS&rsquo;s Hunt and Incident Response Team (HIRT) secures the nation&rsquo;s infrastructure. HIRT provides DHS&rsquo;s front-line response for cyber incidents and proactive hunting for malicious cyber activity. Nightwing provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. Nightwing provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. Nightwing is seeking Cyber Eviction Analysts to support this critical customer mission. 
Responsibilities: 
<ul><li>Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)</li><li>Distills analytic findings into executive summaries and in-depth technical reports</li><li>Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities</li><li>Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives</li><li>Exercises considerable latitude in determining technical objectives of an assignment or task at hand</li><li>Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity</li><li>Analyzes incident data and victim environments to recommend targeted mitigations</li><li>Advise technical personnel on countermeasure implementation and customization</li><li>Supports internal stakeholders on containment and eradication missions</li><li>Documents analysis in a standardized knowledgebase for sharing and publication</li><li>Assists in maintaining branch process and procedure documentation</li><li>Guides the completion of hunt and incident response activities</li></ul> 
Required Skills: 
<ul><li>U.S. Citizenship</li><li>Must have an active TS/SCI clearance</li><li>Must be able to obtain DHS Suitability</li><li>8+ years of directly relevant experience in the area of expertise</li><li>Must be able to travel domestically on short notice</li><li>Strong understanding of network architecture/security</li><li>Experience performing cyber incident response</li><li>Ability to think independently</li><li>Demonstrates superior written and oral communication skills</li><li>Must be able to work collaboratively across physical locations</li><li>Skilled in identifying different classes of attacks and attack stages</li><li>Understanding of system and application security threats and vulnerabilities</li><li>Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources</li><li>Proficiency with common operating systems (e,g, Linux/Unix, Windows)</li></ul> 
Desired Skills: 
<ul><li>Experience leading and mentoring technical teams</li><li>Knowledge of Computer Network Defense policies, procedures and regulations</li><li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])</li></ul>
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code) 
<ul><li>Network and System administration experience</li><li>Strong understanding of adversarial tactics/techniques/procedures (TTPs)</li><li>Experience with Identity and Access Management (IAM) tools</li><li>Ability to review and analyze Enterprise Architecture (EA) from a security perspective</li><li>Understanding of cyber defense-in-depth principles</li><li>Hands-on skill in host/network intrusion detection</li><li>Ability to perform event correlation</li><li>Experience with malicious activity analysis</li><li>Ability to collaborate with stakeholders at multiple levels within an organization</li></ul> 
Required Education: 
BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma &amp; 10+ years of technical experience in the area of expertise. 
 
Desired Certifications: One or more 
<ul><li>DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst</li><li>DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder</li><li>DoD 8140.01 CEH, CSSP Analyst</li><li>SANS GIAC GNFA preferred</li><li>SANS GRID, GICSP, or GCIP a plus</li></ul> 

Our Company Overview 
Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services to all of our clients. 
 
Benefits 
Extremely competitive salary 
95% employer paid for employee medical, dental, &amp; vision coverages 
100% employer paid for employee life, STD &amp; LTD disability coverages 
401k with company match and profit sharing 
Flexible Spending Account (FSA) for dependent &amp; health care 
11 standard holidays &amp; 3 weeks of annual leave 
 
ESS-3395 
ESS-3394 
ESS-3392 
Incident Response Expert - IV -IRE04
JOIzvhVUcu</div>

Cyber Eviction Analyst

Concept Plus

<div>About Concept Plus 
 
Concept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm. 
Recognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty. 
We offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment. 
For more information, visit www.conceptplus.com. 
About the role
Concept Plus is seeking a highly capable, self-driven Cyber Analyst to support a critical software modernization initiative for our client. This position plays a key role in analyzing mission-focused requirements, streamlining processes, and enhancing decision-making for operations.
As the strategic link between operational objectives and technology solutions, the Cyber Analyst will translate complex business needs into actionable insights and support the successful execution of priorities while ensuring alignment with client compliance standards.
This role operates within a collaborative Agile and DevSecOps framework to ensure secure, timely, and iterative delivery of capabilities. The ideal candidate thrives in a fast-paced, evolving environment and brings a deep understanding of both business processes and technological integration. 
What you'll do<ul><li>
Lead and maintain the full RMF/ATO lifecycle, managing security authorization packages and updating SSPs, POA&amp;Ms, risk assessments, and continuous monitoring artifacts.</li><li>
Ensure system confidentiality, integrity, and availability through compliance with NIST 800‑53, DoDI 8500.01, DoDI 8510.01, and related DoD cybersecurity policies.</li><li>
Support Agile/DevSecOps deployments, integrating cybersecurity requirements into sprints, CI/CD pipelines, release schedules, and system design reviews.</li><li>
Perform vulnerability scanning, assessment, and remediation&mdash;using Nessus, eMASS, SonarQube, Checkmarx, Trivy, Dependency Track&mdash;and ensure compliance with DISA STIGs.</li><li>
Perform cloud focused vulnerability scanning, assessment, and remediation using Nessus, eMASS, SonarQube, Checkmarx ensuring compliance with cloud security baselines.</li><li>
Provide security engineering support, including secure architecture input, SSO/SSL integration, secure configuration guidance, and API/cloud security reinforcement.</li><li>
Collaborate with technical teams, ISSMs, and AO representatives to support audits, inspections, security reviews, and risk mitigation activities.</li><li>
Track, report, and respond to cybersecurity incidents, ensuring timely coordination and recovery actions.</li><li>
Develop and maintain key cybersecurity documentation, including ISAs, MOAs, SoD matrices, architecture diagrams, and application/database security artifacts.</li><li>
Monitor project progress and deliver clear, actionable cybersecurity reports and risk insights to leadership and government stakeholders.</li><li>
Communicate effectively with internal teams, customers, and stakeholders in a clear, concise, and professional manner.</li></ul> 
Required Qualifications<ul><li>
US Citizen</li><li>
Ability to obtain and/or maintain a government clearance.</li><li>
Bachelor&rsquo;s Degree in an IT related field</li><li>
CISSP Certification (IAT Level 3 Certification)</li><li>
8+ years of experience as Cyber Analyst</li><li>
5+ years&rsquo; experience with ATO procurement in Cloud Environment</li><li>
5+ years in DoD Environment</li><li>
5+ Years Experience with the Risk Management Framework Process</li><li>
5+ Years Experience operating the Enterprise Mission Assurance Support Service Application (eMASS)</li></ul> 
Preferred Qualifications<ul><li>
DOD/Government contracting experience, Government IT systems experience.</li><li>
Able to work independently and report to a blended Cyber Team ISSM</li><li>
Good documentation skills</li><li>
Confident communicator with excellent verbal and written skills</li></ul> 
Concept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.</div>

Cyber Analyst

Ralliant

<div>
 Role Description
 
 
 Role located in Beaverton, OR or West Coast Remote
 
 
 The
 
 Cyber Defense Generalist &ndash; Americas
 
 is a hands-on cyber defense practitioner supporting regional security operations across North and South America. The primary objective of this role is to
 
 detect, analyze, contain, and support the resolution of business-impacting security threats and events
 
 through disciplined execution of security operations processes.
 
 
 This role operates within a
 
 24x7 security operations environment
 
 , contributing to incident response, alert triage, threat analysis, threat hunting, and data loss prevention (DLP) investigations under established playbooks and escalation models. The L2 Generalist acts as a reliable second-line responder, handling more complex investigations, supporting incident commanders, and ensuring high-quality evidence, documentation, and communication.
 
 
 The role provides operational support for
 
 U.S. Government&ndash;regulated and customer-controlled environments
 
 , including
 
 CMMC-aligned environments
 
 , executing incidents and investigations in a defensible, audit-ready manner consistent with contractual and regulatory requirements.
 
 
 The Cyber Defense Generalist works in close partnership with global Security Operations, Cyber Defense Engineering, GRC, Audit, IT Shared Services, Infrastructure and Cloud teams, Identity teams, and engages Legal, HR, and Privacy through defined workflows when required. Execution is aligned to the
 
 Ralliant Business System (RBS)
 
 , emphasizing standard work, repeatability, continuous improvement, and measurable outcomes.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Execute SOC operations including alert investigation, correlation, case management, escalation, and shift handoff in alignment with 24x7 operational coverage models.
 </li>
 <li>
 Perform incident response activities, including detailed analysis, containment support, evidence collection, and recovery coordination under direction of the incident commander.
 </li>
 <li>
 Support incident command by providing timely technical findings, impact assessments, and clear updates suitable for operational and executive audiences.
 </li>
 <li>
 Operate, tune and Manage SIEM (LogScale) for Security operations activities.
 </li>
 <li>
 Investigate and respond to DLP alerts, applying defined workflows, documentation standards, and escalation criteria, and coordinating with Legal, HR, and Privacy for sensitive cases.
 </li>
 <li>
 Conduct threat analysis and targeted threat hunting, identifying indicators of compromise, validating detections, and surfacing control gaps or improvement opportunities.
 </li>
 <li>
 Translate threat intelligence into actionable investigative steps, detection feedback, and response recommendations.
 </li>
 <li>
 Support exposure and vulnerability response activities by validating exploitability, assisting with risk-based prioritization, and tracking remediation or exception outcomes.
 </li>
 <li>
 Ensure high-quality documentation and evidence handling to support audits, customer inquiries, and regulatory obligations, particularly for regulated environments.
 </li>
 <li>
 Contribute to continuous improvement by providing feedback on detections, false positives, playbooks, and operational workflows.
 </li>
 <li>
 Participate in simulations, tabletop exercises, and after-action reviews, incorporating lessons learned into day-to-day execution.
 </li>
 <li>
 Follow RBS-aligned standard work, including runbooks, playbooks, checklists, and tooling, to ensure consistent, repeatable, and auditable operations.
 </li>
 <li>
 Partner with Cyber Defense Engineering to improve detection coverage and fidelity across endpoint, identity, cloud, SaaS, email, and network telemetry, including tuning to reduce false positives and increase high confidence detections.
 </li>
 <li>
 Execute threat hunts focused on both security and resilience, identifying control gaps, validating defensive assumptions, and improving readiness for high impact scenarios.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree recommended; equivalent practical experience considered.
 </li>
 <li>
 3&ndash;6+ years of experience in security operations, incident response, or cyber defense roles.
 </li>
 <li>
 Demonstrated hands-on experience investigating security alerts and incidents across endpoint, identity, cloud, SaaS, email, and network domains.
 </li>
 <li>
 Experience supporting regulated or customer-driven security environments; familiarity with CMMC and NIST SP 800‑171 expectations is preferred.
 </li>
 <li>
 Practical experience with DLP investigation and response workflows, including handling sensitive data loss scenarios with discretion and defensible documentation.
 </li>
 <li>
 Practical experience in managing and operating a SIEM solution &ndash; from ingest to reporting.
 </li>
 <li>
 Working knowledge of threat intelligence consumption and basic threat hunting techniques.
 </li>
 <li>
 Experience collaborating with infrastructure, cloud, identity, and application teams during incident response or remediation activities.
 </li>
 <li>
 Strong written and verbal communication skills, with the ability to clearly document technical findings and explain risk and impact.
 </li>
 <li>
 Ability to operate effectively in a global, multi-time-zone environment while maintaining consistency with enterprise standards.
 </li>
 <li>
 Alignment with Ralliant values and the Ralliant Business System (RBS), including ownership, transparency, and continuous improvement.
 
 
 </li>
 </ul>
 
 
 Ralliant Corporation Overview
 
 
 
 
 Ralliant, originally part of Fortive, now stands as a bold, independent public company driving innovation at the forefront of precision technology. With a global footprint and a legacy of excellence, we empower engineers to bring next-generation breakthroughs to life &mdash; faster, smarter, and more reliably. Our high-performance instruments, sensors, and subsystems fuel mission-critical advancements across industries, enabling real-world impact where it matters most. At Ralliant we&rsquo;re building the future, together with those driven to push boundaries, solve complex problems, and leave a lasting mark on the world.
 
 
 We Are an Equal Opportunity Employer. Ralliant Corporation and all Ralliant Companies are proud to be equal opportunity employers. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law. Ralliant and all Ralliant Companies are also committed to providing reasonable accommodations for applicants with disabilities. Individuals who need a reasonable accommodation because of a disability for any part of the employment application process, please contact us at applyassistance@Ralliant.com.
 
 
 
 Pay Range
 
 
 
 The salary range for this position (in local currency) is 66900.00-124300.00
 
 
 
 Is this role subject to ITAR?
 
 
 
 The essential duties of this position require adherence to U.S. Government export control regulations. Accordingly, candidates must either be U.S. Persons (i.e., U.S. citizens, U.S. lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3)) or be prepared to collaborate with the company in securing the necessary U.S. government export authorizations. While the company encourages all interested applicants to apply, please be aware that ongoing employment is dependent upon obtaining the appropriate government export authorizations.
 
 
 
 
 Ralliant Corporation Overview
 
 
 
 
 Ralliant, originally part of Fortive, now stands as a bold, independent public company driving innovation at the forefront of precision technology. With a global footprint and a legacy of excellence, we empower engineers to bring next-generation breakthroughs to life &mdash; faster, smarter, and more reliably. Our high-performance instruments, sensors, and subsystems fuel mission-critical advancements across industries, enabling real-world impact where it matters most. At Ralliant we&rsquo;re building the future, together with those driven to push boundaries, solve complex problems, and leave a lasting mark on the world.
 
 
 We Are an Equal Opportunity Employer. Ralliant Corporation and all Ralliant Companies are proud to be equal opportunity employers. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law. Ralliant and all Ralliant Companies are also committed to providing reasonable accommodations for applicants with disabilities. Individuals who need a reasonable accommodation because of a disability for any part of the employment application process, please contact us at applyassistance@Ralliant.com.
 
 
 The salary range for this position (in local currency) is 66900.00-124300.00
 
 
</div>

Cyber Defense Generalist – Americas

U.S. Marine Corps

Marine Corps Community Services (MCCS) is looking for the best and brightest to join our Team! MCCS is a comprehensive program that supports and enhances the quality of life for Marines, their families, and others in the Marine Corps Community. We offer a team-oriented environment comprised of military personnel, civilian employees, contractors and volunteers who keep the organization functioning smoothly and effectively. As a service-oriented organization, we never waver in our commitment to our Corps.
 
This position is located at Headquarters (Quantico, VA). Candidates selected for this position will serve as a Cyber Security Analyst, NF3.
 
Major Duties
 
The position serves as a Cybersecurity Analyst for the Information Technology Directorate (MRI), NAF Business and Support Services Division (MR), Manpower and Reserve Affairs Department, Headquarters Marine Corps. The incumbent will provide vulnerability management, intrusion prevention, and security information and event management services to the Marine Corps installations worldwide.
 <ul>
<li>Assist senior analysts in collaborating with various teams within the MRI directorate to ensure security is embedded in all aspects of Marine Corps Community Services (MCCS) systems and networks.</li>
<li>Monitor MCCS network traffic and security dashboards to identify potential anomalies. Triage initial alerts and escalate verified incidents to senior analysts for remediation.</li>
<li>Assist senior analysts in identifying trends and emerging threats through real-time security monitoring and data analytics.</li>
<li>Assist senior analysts with identifying malicious activity to determine weaknesses exploited, exploitation methods, and effects on systems and information.</li>
<li>Monitor vulnerability scans across the MCCS network to confirm patch levels and remediation status. Assist senior analysts with researching and testing remediations for identified vulnerabilities and weaknesses.</li>
<li>Follow established procedures to conduct basic security testing and validation of IT systems to detect misconfigurations and potential threats.</li>
<li>Gather and organize security data to help track compliance metrics for MCCS network infrastructure. Maintain accurate records for audit readiness.</li>
<li>Provide professional support to MCCS users by responding to security-related inquiries and assisting with the implementation of security best practices.</li>
</ul>
Qualifications
 
Associates' Degree in Information Technology or Business related field appropriate to the work of position AND transcript with at least 9 hours of coursework in audit log analysis, vulnerability management, or cybersecurity (CY); OR an appropriate combination of education and experience that demonstrates possession of knowledge and skill equivalent to that gained in the above, OR appropriate experience that demonstrates the applicant has acquired the knowledge, skills, and abilities equivalent to that gained in the above.
 
Knowledge of specific operational impacts of cyber security lapses, cyber threats and vulnerabilities. Understand business continuity and disaster recovery continuity of operations plans. Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. Understanding of risk management processes, secure configuration management techniques, encryption algorithms, host/network access control mechanisms, vulnerability information dissemination sources, Payment Card Industry (PCI) data security standards, Personally Identifiable Information (PII) data security standards, incident categories, incident responses, timelines for responses, intrusion detection methodologies, and techniques for detecting host and network-based intrusions.
 
Skill in preserving evidence integrity according to standard operating procedures or national standards, protecting a network against malware, using security event correlation tools, performing damage assessments, design incident response for cloud service models, identifying, capturing, containing and reporting malware, running Security Content Automation Protocol (SCAP) content, and Security Technical Implementation Guides (STIGS) based tools for benchmark and security configuration reviews.
 
Ability to identify systemic security issues based on the analysis of signatures and indicators from use cases, design incident response for cloud service models, apply cybersecurity and privacy principles to organizational requirements, conduct audit log analysis, and translate results into evaluative conclusions.
 
As an authorized and privileged user of Department of Defense Information Systems must fulfill the requirement to complete Cyberspace Workforce Qualification and Management Program (DoDM 8140.03) as a condition of access within six months of employment. This position has been determined as a Cybersecurity Analyst with proficiency level of Basic.
 
This position had been determined as Moderate Risk. As a condition of employment, the incumbent must be able to obtain and maintain an Access National Agency Check and Inquiries (ANACI/ Tier 3) Secret Clearance to access classified information.
 
How To Apply
 
All applications must be submitted online via the MCCS Careers website.
 
Resumes/applications emailed or mailed will not be considered for this vacancy announcement. Resumes with personal photographs will not be considered for this vacancy. To be considered for employment, the application or resume must be submitted online by 11:59 PM (ET) on the closing date of the announcement.
 
Note: To check the status of your application or return to a previous or incomplete application, log into your MCCS user account and review your application status.
 
Closing Statement
 
GENERAL INFORMATION: Applicants are assured of equal consideration regardless of race, age, color, religion, national origin, sex, GINA, political affiliation, membership or non-membership in an employee organization, marital status, physical handicap which has no bearing on the ability to perform the duties of the position. This agency provides reasonable accommodations to applicants with disabilities. If you need a reasonable accommodation for any part of the application and hiring process, please notify the agency. The decision on granting reasonable accommodation will be on a case-by-case basis.
 
It is Department of Navy (DON) policy to provide a workplace free of discrimination and retaliation. The DON No Fear Act policy link is provided for your review: https://www.secnav.navy.mil/donhr/Site/Pages/No-Fear-Act.aspx
 
As part of the employment process, Human Resources Division may obtain a Criminal Record Check and/or an Investigative Consumer Report. Employment is contingent upon the successful completion of a National Agency Check and Inquiries (NACI). For all positions requiring access to firearms or ammunition, the Federal Government is prohibited from employing individuals in these positions who have ever been convicted of a misdemeanor crime of domestic violence, or a felony crime of domestic violence adjudged on or after 27 November 2002. Selectees for such positions must submit a completed DD Form 2760, Qualification to Possess Firearms or Ammunition, before a final job offer can be made.
 
Direct Deposit of total NET pay is mandatory as a condition of employment for all appointments to positions within MCCS.
 
Required Documents: 
<ul>
<li>Education/certification certificate(s), if applicable.</li>
<li>If prior military, DD214 Member Copy</li>
</ul>
This activity is a Drug-free workplace. The use of illegal drugs by NAF employees, whether on or off duty, cannot and will not be tolerated. Federal employees have a right to a safe and secure workplace, and Marines, sailors, and their family members have a right to a reliable and productive Federal workforce.
 
Involuntarily separated members of the armed forces and eligible family members applying through the Transition Assistance Program must submit a written request/statement (may be obtained from the MCCS Human Resources Office) and present ID card with "TA" stamped in red on front of card.
 
INDIVIDUALS SELECTED FROM THIS ANNOUNCEMENT MAY BE CHANGED TO PART-TIME OR FULL-TIME AT MANAGEMENT'S DISCRETION WITHOUT FURTHER COMPETITION.
 
ALL ONLINE APPLICATIONS MUST BE RECEIVED BY 1159PM EASTERN TIME (ET) ON THE CLOSING DATE LISTED IN THE JOB POSTING.

CYBER SECURITY ANALYST

Search 1194+ Cyber defense analyst jobs near you this June. New roles added regularly across leading industries. Apply today.

1194 cyber defense analyst jobs Near Me

Cyber Defense Analyst (Tier 1)

Cyber Defense Principal Analyst, Mandiant, Google Cloud

Cyber Defense Principal Analyst, Mandiant, Google Cloud

Cyber Eviction Analyst

Cyber Analyst

Cyber Defense Generalist – Americas

CYBER SECURITY ANALYST