cyber defense analyst

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Junior Cyber Defense Operations Analyst to join our Threat Detection &amp; Response team as a frontline defender. You will monitor, triage, and investigate security alerts across SIEM, EDR, and XDR platforms, perform initial incident analysis, escalate confirmed threats, and maintain shift-based coverage for our managed services clients and on-site engagements. You will also leverage AI-augmented tooling and agentic SOC capabilities that Cyber Force is actively building into its detection and response workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Monitor security alerts from SIEM (Elastic SIEM, Microsoft Sentinel), EDR/XDR (Defender XDR) across client environments</li>
<li>Triage and investigate alerts: analyze log data, correlate events, identify IOCs, determine true vs. false positives</li>
<li>Perform initial incident response: collect artifacts, preserve evidence, escalate to Tier 2/3 with structured handoff</li>
<li>Execute detection playbooks aligned with MITRE ATT&amp;CK</li>
<li>Analyze network traffic, endpoint telemetry, and identity/authentication logs</li>
<li>Maintain shift logs, case notes, and client-facing incident reports to SLA standards</li>
<li>Contribute to detection engineering: propose rule improvements, tune thresholds</li>
<li>Leverage AI-augmented tooling and LLM-based tools (Claude, ChatGPT) for alert enrichment and report drafting</li>
<li>Validate AI-generated investigation outputs from agentic SOC capabilities</li>
<li>Participate in purple team exercises and continuous training</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>0&ndash;1 year experience in SOC, cyber defense, or IT security (internships, labs, CTFs count)</li>
<li>At least one cert: CompTIA Security+, CySA+, BTL1, ISACA CCOA, or equivalent</li>
<li>Fluent English (written and spoken)</li>
<li>Foundational knowledge of SIEM, EDR/XDR, and log analysis</li>
<li>Networking fundamentals: TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs</li>
<li>Familiarity with MITRE ATT&amp;CK and common adversary TTPs</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Willingness to work rotating shifts (24/7 coverage) and deploy to client sites</li>
<li>Elastic, Microsoft Sentinel, or Defender XDR experience &mdash; a strong plus</li>
<li>VICI VCDA (Viridian Certified Defense Associate) certification &mdash; a plus</li>
<li>French language skills &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior Cyber Defense Operations Analyst

NMC Health plc

<div>Actively monitor the networks, systems, applications, IT assets and bio-medical equipment&rsquo;s for suspicious activity and threats. Using offensive and defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or may occur within the network and make the initial decision on the event/ threat severity.</div>
 <div><ul><li>Manage network, intrusion detection and prevention systems.
</li><li>Conduct periodic compromise assessments across selected networks and propose recommendations based on assessment results.
</li><li>Conduct physical security assessment of the organization&rsquo;s systems, including servers and networks, ensuring that any unauthorized external physical interference is not actually possible.
</li><li>Conduct ongoing network hunt activities.
</li><li>Conduct proactive vulnerability assessment across the network, subnetworks and service traffic to identify potential points of intrusion.
</li><li>Research and develop methods of tracking and detecting malicious activity within a network.
</li><li>Develop tools, signatures, and methods of detection for use in incident response activities.
</li><li>Develop SIEM integrations, dashboards, and analytics to illuminate and visualize threat activity.
</li><li>Analyze network traffic to provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
</li><li>Uses data collected from a variety of cyber defense tools (e.g., anti-virus, IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments, perform cyber defense trend analysis and reporting, and perform event correlation to mitigate threats and gain situational awareness and determine the effectiveness of an observed attack.
</li><li>Carries out triage to ensure that a genuine security incident is occurring.
</li><li>Coordinate with entity-wide cyber defense staff to validate network alerts.
</li><li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event&rsquo;s history, status, and potential impact for further action in accordance with the organization&rsquo;s cyber incident response plan.
</li><li>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
</li><li>Provide daily summary reports of network events and activity relevant to cyber defense practices.
</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
</li><li>Isolate and remove malware.
</li><li>Develop content for cyber defense tools use them for continual monitoring and analysis of network activity to identify malicious activity.
</li><li>Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within the network environment.
</li><li>Analyze and report organizational security posture trends.
</li><li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus, Threat Intelligence Providers) to maintain updated of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
</li><li>Provides cybersecurity recommendations based on significant threats and vulnerabilities.
</li><li>Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operational Plans.
</li><li>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber incidents within the enterprise.
</li><li>Use specialized equipment and techniques to catalog, document, extract, collect, package, and preserve digital evidence.
</li></ul>Utilize deployable forensics toolkit to support operations as necessary</div>
 <div>Knowledge
<ul><li>Security concepts such as cyber-attacks and techniques, threat vectors, risk and threat management, incident management etc.
</li><li>Networking concepts and protocols, and network security attacks, vulnerabilities, processes, methodologies, access control mechanisms, traffic analysis methods.
</li><li>Cyber threats and vulnerabilities and information dissemination sources (e.g., alerts and advisories).
</li><li>Cyber defense and vulnerability assessment tools and their capabilities.
</li><li>System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
</li><li>Scripting languages (e.g., Python, Perl, Bash) used in an incident response environment
</li><li>Incident response and handling methodologies.
</li><li>Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools, applications, methodologies and techniques for detecting host and network-based intrusions.
</li><li>Threat investigations, reporting and investigative tools.
</li><li>Cyber defense and information security policies, procedures, and regulations.
</li><li>Common attack vectors, the different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks) and attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
</li><li>Cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), and attackers&rsquo; methodologies.
</li><li>Signature implementation impact for viruses, malware, and attacks.
</li><li>Windows/Unix ports and services.
</li><li>Relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
</li><li>Packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
</li><li>Use of sub-netting tools.
</li><li>Penetration testing principles, tools, and techniques.
</li><li>Investigation, auditing and forensics methods, processes, procedures and standards.
</li><li>Different types of hardware, storage, imaging and file system analysis.
</li><li>Data backup and recovery.
</li></ul>Skills
<ul><li>Using SIEM/SOAR and Vulnerability Management tools and services.
</li><li>Sysadmin skills (Linux/Mac/Windows).
</li><li>Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more).
</li><li>Identifying, analyzing and interpreting trends or patterns in complex data sets.
</li><li>Developing and deploying signatures.
</li><li>Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
</li><li>Using incident handling methodologies.
</li><li>Collecting data from a variety of cyber defense resources.
</li><li>Recognizing and categorizing types of vulnerabilities and associated attacks.
</li><li>Performing packet-level analysis.
</li><li>Conducting trend analysis.
</li><li>Using cyber defense reporting structure and processes.
</li><li>Utilizing a combination of automated and manual testing methods.
</li><li>Developing automated vulnerability testing scripts and using off the shelf vulnerability testing tools.
</li><li>Conducting vulnerability scans and recognizing vulnerabilities in networks, systems and applications.
</li><li>Using of penetration testing tools and techniques.
</li><li>Applying analytical and problem-solving skills.
</li></ul>Ability
<ul><li>Collaborate with other sections across the department to enhance detection capabilities.
</li><li>Perform Malware analysis.
</li><li>Work closely with management to respond appropriately to the results of assessments and mitigation oversight of found vulnerabilities.
</li><li>Perform data analysis, correlation, and analytics leveraging Security Information and Event Management (SIEM) tools.
</li><li>Conduct vulnerability scans and recognize vulnerabilities in security systems &amp; devices.
</li><li>Accurately and completely source all data used in intelligence, assessment and/or planning products.
</li><li>Apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
</li><li>Interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
</li><li>Prepare and create regular reports to document any security breaches/ incidents.
</li><li>Provide forensic support to Cyber Security Operations during the investigation of any detected threat or contained incident / event to determine root cause and propose response recommendations as required.
</li></ul>Education and Certification
<ul><li>Bachelor&rsquo;s degree in an information technology, computer science, cyber security or equivalent work experience.
</li><li>CompTIA Security+
</li><li>CISSP: Certified Information Systems Security Professional
</li><li>GCFA: GIAC Certified Forensic Analyst
</li><li>GCIH: GIAC Certified Incident Handler
</li><li>GCIA: GIAC Certified Intrusion Analyst
</li><li>OSCP: Offensive Security Certified Professional
</li><li>CEH: Certified Ethical Hacker
</li><li>CPT: Certified Penetration Tester
</li></ul>Experience
<ul><li>3 years of experience in cyber security operations with expertise in managing the Security Operations Center
</li><li>UAE experience preferred.</li></ul></div>

Information Security Specialist

General Dynamics Information Technology

<div><div><div>Your Impact
Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.
Job Description<div><div>
SOC ANALYST 
 
Advance your career while impacting our national security in cyber as a SOC Analyst Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. 
 
WHAT YOU&rsquo;LL NEED TO SUCCEED 
Bring your cyber expertise and drive for innovation to GDIT. The SOC Analyst Principal must have: 
<ul><li>Education: Technical Training, Certification(s) or Degree</li><li>Experience: 4+ years of related experience</li></ul></div>
Required certs:
IAT II
CSSP Analyst
GMON
SCCU<div> 
GDIT IS YOUR PLACE 
At GDIT, the mission is our purpose, and our people are at the center of everything we do. 
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul> 
OWN YOUR OPPORTUNITY 
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div>
#VA_2026Alumni
#MD_2026Alumni
</div></div><div><div><div>Work Requirements</div></div><div></div><div><div>
Years of Experience<div>
8 + years of related experience</div><ul><li>may vary based on technical training, certification(s), or degree</li></ul></div><div></div><div>
Certification</div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div>
Salary and Benefit Information<div>
The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. 
View information about benefits and our total rewards program.</div>
About Our Work<div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</div></div></div>

Cyber SOC Incident Detector (MIDS Shift) - TS/SCI with Polygraph

The Amatriot Group

<div><div>Cyber Threat Analyst 
5 Year DoJ Contract | Chantilly, VA 
Amatriot is seeking a Cyber Threat Analyst to support a Cyber Technical Analysis Unit in 
analyzing cyber intrusion activity, digital communications, and host/network forensic artifacts in 
support of DoJ mission operations. This role is focused on cyber threat analysis, intrusion 
investigation, host-based forensic analysis, network traffic analysis, and attribution support 
within a highly sensitive operational environment. The ideal candidate will possess experience 
analyzing Splunk data, conducting host and network forensic analysis, and utilizing industrystandard 
forensic and cyber analysis tools to identify malicious activity, recover artifacts, and 
support investigative operations. 
Responsibilities 
<ul><li>Process, evaluate, and analyze digital network communications and cyber threat data to</li></ul>
identify malicious activity and support investigative operations. 
<ul><li>Conduct cyber intrusion investigations and end-to-end kill chain analysis across host and</li></ul>
network environments. 
<ul><li>Perform host-based forensic analysis leveraging Splunk and standard forensic toolsets</li></ul>
to identify indicators of compromise, attacker activity, persistence mechanisms, and 
unauthorized access. 
<ul><li>Analyze packet capture (PCAP) and NetFlow data to identify malicious communications,</li></ul>
software usage, command execution, credential activity, and network-based indicators of 
compromise. 
<ul><li>Correlate digital artifacts including IP addresses, URLs, malware indicators, system logs,</li></ul>
and user activity across multiple data sources to support attribution and investigative 
lead generation. 
<ul><li>Analyze encrypted and plaintext credentials, registry artifacts, rootkit activity, commandline</li></ul>
execution, and other system-level forensic evidence. 
<ul><li>Draft detailed technical reports and analytical findings based on cyber investigations</li></ul>
while participating in internal review and quality assurance processes. 
<ul><li>Support development and refinement of cyber analysis processes, CONOPS, SOPs,</li></ul>
and investigative methodologies. 
<ul><li>Conduct open-source and intelligence community research to maintain awareness of</li></ul>
emerging cyber threats, malware trends, and adversary tactics, techniques, and 
procedures (TTPs). 
<ul><li>Collaborate with internal teams and mission partners across the intelligence community</li></ul>
to support tactical and strategic cyber operations. 
<ul><li>Provide operational updates and analytical findings to leadership and investigative</li></ul>
stakeholders. 
Required Skills &amp; Experience 
<ul><li>Active Top Secret Clearance required, with willingness and ability to obtain a Counter</li></ul>
Intelligence (CI) Polygraph. 
<ul><li>BS/BA degree with 5+ years of relevant experience or 9 years with no degree. Advanced</li></ul>
certifications, specialized training, or equivalent hands-on experience may be considered 
in lieu of years of experience 
<ul><li>Experience performing host-based forensic analysis utilizing Splunk.</li><li>Experience analyzing network traffic, packet capture (PCAP), and NetFlow data.</li><li>Hands-on experience with industry-standard forensic tools such as:</li></ul>
o Splunk 
o EnCase 
o Magnet AXIOM 
o X-Ways Forensics 
<ul><li>Understanding of cyber intrusion methodologies, attacker kill chains, malware behavior,</li></ul>
and forensic artifact analysis. 
<ul><li>Experience correlating threat indicators and investigative data to support attribution and</li></ul>
operational analysis.</div></div>

Cyber Threat Analyst

<div>
 5 Year DoJ Contract | Chantilly, VA
 
 
 Amatriot is seeking a Cyber Threat Analyst to support a Cyber Technical Analysis Unit in
 
 
 analyzing cyber intrusion activity, digital communications, and host/network forensic artifacts in
 
 
 support of DoJ mission operations. This role is focused on cyber threat analysis, intrusion
 
 
 investigation, host-based forensic analysis, network traffic analysis, and attribution support
 
 
 within a highly sensitive operational environment. The ideal candidate will possess experience
 
 
 analyzing Splunk data, conducting host and network forensic analysis, and utilizing industrystandard
 
 
 forensic and cyber analysis tools to identify malicious activity, recover artifacts, and
 
 
 support investigative operations.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Process, evaluate, and analyze digital network communications and cyber threat data to
 
 
 </li>
 </ul>
 identify malicious activity and support investigative operations.
 
 
 <ul>
 <li>
 Conduct cyber intrusion investigations and end-to-end kill chain analysis across host and
 
 
 </li>
 </ul>
 network environments.
 
 
 <ul>
 <li>
 Perform host-based forensic analysis leveraging Splunk and standard forensic toolsets
 
 
 </li>
 </ul>
 to identify indicators of compromise, attacker activity, persistence mechanisms, and
 
 
 unauthorized access.
 
 
 <ul>
 <li>
 Analyze packet capture (PCAP) and NetFlow data to identify malicious communications,
 
 
 </li>
 </ul>
 software usage, command execution, credential activity, and network-based indicators of
 
 
 compromise.
 
 
 <ul>
 <li>
 Correlate digital artifacts including IP addresses, URLs, malware indicators, system logs,
 
 
 </li>
 </ul>
 and user activity across multiple data sources to support attribution and investigative
 
 
 lead generation.
 
 
 <ul>
 <li>
 Analyze encrypted and plaintext credentials, registry artifacts, rootkit activity, commandline
 
 
 </li>
 </ul>
 execution, and other system-level forensic evidence.
 
 
 <ul>
 <li>
 Draft detailed technical reports and analytical findings based on cyber investigations
 
 
 </li>
 </ul>
 while participating in internal review and quality assurance processes.
 
 
 <ul>
 <li>
 Support development and refinement of cyber analysis processes, CONOPS, SOPs,
 
 
 </li>
 </ul>
 and investigative methodologies.
 
 
 <ul>
 <li>
 Conduct open-source and intelligence community research to maintain awareness of
 
 
 </li>
 </ul>
 emerging cyber threats, malware trends, and adversary tactics, techniques, and
 
 
 procedures (TTPs).
 
 
 <ul>
 <li>
 Collaborate with internal teams and mission partners across the intelligence community
 
 
 </li>
 </ul>
 to support tactical and strategic cyber operations.
 
 
 <ul>
 <li>
 Provide operational updates and analytical findings to leadership and investigative
 
 
 </li>
 </ul>
 stakeholders.
 
 
 
 Required Skills &amp; Experience
 
 
 
 <ul>
 <li>
 Active Top Secret Clearance required, with willingness and ability to obtain a Counter
 
 
 </li>
 </ul>
 Intelligence (CI) Polygraph.
 
 
 <ul>
 <li>
 BS/BA degree with 5+ years of relevant experience or 9 years with no degree. Advanced
 
 
 </li>
 </ul>
 certifications, specialized training, or equivalent hands-on experience may be considered
 
 
 in lieu of years of experience
 
 
 <ul>
 <li>
 Experience performing host-based forensic analysis utilizing Splunk.
 </li>
 <li>
 Experience analyzing network traffic, packet capture (PCAP), and NetFlow data.
 </li>
 <li>
 Hands-on experience with industry-standard forensic tools such as:
 </li>
 <li>
 Splunk
 </li>
 <li>
 EnCase
 </li>
 <li>
 Magnet AXIOM
 </li>
 <li>
 X-Ways Forensics
 </li>
 <li>
 Understanding of cyber intrusion methodologies, attacker kill chains, malware behavior,
 
 
 </li>
 </ul>
 and forensic artifact analysis.
 
 
 <ul>
 <li>
 Experience correlating threat indicators and investigative data to support attribution and
 
 
 </li>
 </ul>
 operational analysis.
</div>

Tikal Group Doha

Job Opportunity: Cybersecurity AnalystLocation: Doha, Qatar Company: Tikal Group DohaAbout UsTikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled Cybersecurity Analyst to strengthen our security operations and safeguard our digital assets.Role OverviewThe Cybersecurity Analyst will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.Key Responsibilities<ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul>Why Join Us?<ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Cybersecurity Analyst

Analytic Services Inc

<div><div>Company Overview: 
 
ANSER enhances national and homeland security by strengthening public institutions. We provide thought leadership for complex issues through independent analysis, and we deliver practical, useful solutions. ANSER values collaboration, integrity, and initiative and we are client focused in all that we do. Because we were established for the purpose of public service and not for profit, we measure our success in the impact of our service.</div>
Position Summary

ANSER is seeking an experienced Countering Weapons of Mass Destruction (CWMD) Analyst to support the Air Force Deputy Chief of Staff for Strategic Deterrence and Nuclear Integration (AF/A10). In this role, you will provide expert technical and analytical support for the development and implementation of CWMD and biodefense policy and strategy across the Department of the Air Force (DAF). You will contribute to operational analysis, policy development, and integration of CWMD considerations into Air Force missions, planning, and acquisition efforts.

This position is full-time onsite within the National Capital Region, including the Pentagon and Joint Base Anacostia-Bolling in Washington, DC.

Day to Day Responsibilities
<ul>
<li>Provide subject matter expertise and technical analysis on CWMD operations, including non-proliferation, targeting, interdiction, strike operations, Ability to Survive and Operate (ATSO), and Chemical, Biological, Radiological, and Nuclear (CBRN) defense.</li>
<li>Support the development, management, and implementation of the DAF's CWMD strategy, implementation guidance, concepts of operations (CONOPs), and contingency plans (CONPLANs).</li>
<li>Conduct technical research and operational evaluations to assess scientific testing results and determine impacts on Air Force personnel, including pilots, aircrew, maintainers, and defenders.</li>
<li>Characterize and assess threat agents, delivery mechanisms, and release environments for CBRN weapons, including their effects on airbase environments, equipment, and infrastructure.</li>
<li>Monitor advancements in scientific understanding of CBRN hazards and recommend updates to hazard duration models and risk management tools.</li>
<li>Conduct technical reviews of Joint Operational Requirements Documents to ensure CWMD and CBRN defense acquisition programs align with Air Force Key Performance Parameters (KPPs).</li>
<li>Integrate CWMD considerations into combatant command and service-level wargames, exercises, and training activities.</li>
<li>Collaborate with DoD and external organizations, including the Joint Staff, Military Services, and Major Commands (MAJCOMs), to support CWMD research, testing, training, and education initiatives.</li>
</ul>
Required Qualifications
<ul>
<li>Active Top Secret (TS) security clearance with eligibility for Sensitive Compartmented Information (SCI).</li>
<li>Bachelor's degree in engineering, scientific, technical, management, or a related field such as international relations or national security studies.</li>
<li>Minimum of 6 years of relevant CWMD experience.</li>
<li>Experience conducting scientific analysis of CBRN weapons and materials, including their properties, hazards, and effects on military systems and personnel.</li>
<li>Experience performing operational analysis on the impact of CBRN weapons on Air Force core missions, particularly aircraft generation and air mobility operations.</li>
<li>Experience supporting senior-level staff organizations, including Service Headquarters, Joint Staff, or Office of the Secretary of Defense.</li>
<li>Strong understanding of Air Force core missions and their integration with MAJCOM mission sets and combatant command operations.</li>
<li>Demonstrated experience managing complex projects with multiple stakeholders and minimal supervision.</li>
<li>Strong analytical, critical thinking, and problem-solving skills, with the ability to work effectively in a team environment.</li>
<li>Experience developing executive-level briefings and drafting informational, point, white, and decision papers.</li>
<li>Ability to travel domestically and internationally as required.</li>
</ul>
Preferred Qualifications
<ul>
<li>Master's degree in a related discipline.</li></ul><div> 

In compliance with the Americans with Disabilities Act (ADA), if you have a disability and would like to request an accommodation in order to apply for a position with ANSER, please call 703-416-2000 or e-mail Recruiting@anser.org

ANSER is proud to be an Equal Opportunity Employer. We seek individuals from a broad variety of backgrounds with varying levels of experience who have a desire to do meaningful work. We recruit, employ, train, compensate, and promote regardless of race, color, gender, religion, national origin, ancestry, disability, age, veteran status, sexual orientation, or any other characteristic protected by law.</div></div>

Countering Weapons of Mass Destruction (CWMD) Analyst

Search 2918+ Cyber defense analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

2918 cyber defense analyst jobs Near Me

Junior Cyber Defense Operations Analyst

Information Security Specialist

Cyber SOC Incident Detector (MIDS Shift) - TS/SCI with Polygraph

Cyber Threat Analyst

Cyber Threat Analyst

Cybersecurity Analyst

Countering Weapons of Mass Destruction (CWMD) Analyst