cyber defense analyst

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
<br><div><h2 class="jobSectionHeader"><b>About Cyber Force</b></h2>
<p>
Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.</p>
<h2 class="jobSectionHeader"><b>
Role Overview</b></h2>
<p>
We are looking for a Junior Cyber Defense Operations Analyst to join our Threat Detection &amp; Response team as a frontline defender. You will monitor, triage, and investigate security alerts across SIEM, EDR, and XDR platforms, perform initial incident analysis, escalate confirmed threats, and maintain shift-based coverage for our managed services clients and on-site engagements. You will also leverage AI-augmented tooling and agentic SOC capabilities that Cyber Force is actively building into its detection and response workflows.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<ul><li>Monitor security alerts from SIEM (Elastic SIEM, Microsoft Sentinel), EDR/XDR (Defender XDR) across client environments</li>
<li>Triage and investigate alerts: analyze log data, correlate events, identify IOCs, determine true vs. false positives</li>
<li>Perform initial incident response: collect artifacts, preserve evidence, escalate to Tier 2/3 with structured handoff</li>
<li>Execute detection playbooks aligned with MITRE ATT&amp;CK</li>
<li>Analyze network traffic, endpoint telemetry, and identity/authentication logs</li>
<li>Maintain shift logs, case notes, and client-facing incident reports to SLA standards</li>
<li>Contribute to detection engineering: propose rule improvements, tune thresholds</li>
<li>Leverage AI-augmented tooling and LLM-based tools (Claude, ChatGPT) for alert enrichment and report drafting</li>
<li>Validate AI-generated investigation outputs from agentic SOC capabilities</li>
<li>Participate in purple team exercises and continuous training</li>
</ul><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>0&ndash;1 year experience in SOC, cyber defense, or IT security (internships, labs, CTFs count)</li>
<li>At least one cert: CompTIA Security+, CySA+, BTL1, ISACA CCOA, or equivalent</li>
<li>Fluent English (written and spoken)</li>
<li>Foundational knowledge of SIEM, EDR/XDR, and log analysis</li>
<li>Networking fundamentals: TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs</li>
<li>Familiarity with MITRE ATT&amp;CK and common adversary TTPs</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Willingness to work rotating shifts (24/7 coverage) and deploy to client sites</li>
<li>Elastic, Microsoft Sentinel, or Defender XDR experience &mdash; a strong plus</li>
<li>VICI VCDA (Viridian Certified Defense Associate) certification &mdash; a plus</li>
<li>French language skills &mdash; a plus</li></ul></div>
<br><div><h4 class="jobSectionHeader"><b>Role details</b></h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior Cyber Defense Operations Analyst

BCMC

<div><div>The Computer Network Defense Analyst uses information collected from a variety of sources to monitor network activity and analyze it for evidence of suspicious behavior. Monitoring and analysis are performed to identify and report events that occur, or might occur, within the network, in order to protect information, information systems, and networks from threats. CNDAs review data collected to analyze cyber events, and the network environment, to find trends, patterns or anomaly correlations that indicate more serious attacks or future threats. The CNDAs will recommend proactive measures to contain the incident. These proactive measurers include, but are not limited to, identification of intruder local changes/suspect interactions, isolation, in-depth digital media analysis, consultation with law enforcement or counterintelligence organizations, development of signatures to detect this malicious behavior and development and deployment of eradication tools.<br>
<br>
<b>Responsibilities:</b><br>
The majority of the CNDA&rsquo;s time (75%) will be spent executing the following tasks:<br>
<ul><li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li><li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li><li>Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment</li><li>Perform cyber defense trend analysis and reporting</li><li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li><li>Provide daily summary reports of network events and activity relevant to cyber defense practices</li><li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of alerts</li><li>Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities</li><li>Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information</li><li>Determine tactics, techniques, and procedures (TTPs) for intrusion sets</li><li>Examine network topologies to understand data flows through the network</li><li>Identify and analyze anomalies in network traffic using metadata</li><li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools</li><li>Identify applications and operating systems of a network device based on network traffic</li><li>Reconstruct a malicious attack or activity based off network traffic</li><li>Identify network mapping and operating system (OS) fingerprinting activities</li><li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave</li><li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan</li></ul><br>
Approximately 25% of the CNDA&rsquo;s time will be spent executing the following tasks:<br>
<br>
<ul><li>Prepare and update manuals, instructions, and operating procedures</li><li>Evaluate established methods and procedures and prepare recommendations for changes in methods and practices where appropriate</li><li>Plan and carry out difficult and complex assignments and develop new methods, approaches, and procedures</li><li>Conduct analyses and recommend resolution of complex issues affecting the specialty area</li><li>Ensure optimal use of commercially available products</li><li>Prepare and present reports</li><li>Evaluate the effectiveness of installed systems and services</li></ul><br>
<b>
Required Skills/Clearances:</b><br>
<ul><li><b>U.S. Citizenship</b></li><li><b>Active TS/SCI clearance</b></li><li><b>Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability</b></li><li>5+ years of direct relevant experience in cyber defense analysis using leading edge technologies and industry standard cyber defense tools- Experience successfully developing and deploying signatures</li><li>Experience detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort)</li><li>Experience implementing incident handling methodologies</li><li>Experience implementing protocol analyzers</li><li>Experience collecting data from a variety of cyber defense resources</li><li>Experience reading and interpreting signatures (e.g. snort)</li><li>Experience performing packet-level analysis</li><li>Experience conducting trend analysis</li></ul><br>
<b>
Desired Skills:</b><br>
<ul><li>GSEC (SANS401), Arcsight (or other SEIM solution), Network+, Security+ and Python programming experience would be ideal.</li><li>Strong math and science background.</li><li>Experience with Carnegie Mellon SiLK tool suite.</li></ul><br>
<b>
Required Education: </b>BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma &amp; 7-9 years of network investigations experience.<br>
<br>
<b>Desired Certifications/Education: </b>&bull; One or more of the following professional certifications: GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, FedVTE</div><p><b>
Our Company Overview:</b></p><p>
Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services o all of our clients.</p><p><b>
Benefits</b></p><p>
Extremely competitive salary<br>
95% employer paid for employee medical, dental, &amp; vison coverages<br>
100% employer paid for employee life, STD &amp; LTD disability coverages<br>
401k with company match and profit sharing<br>
Flexible Spending Account (FSA) for dependent &amp; health care<br>
11 standard holidays &amp; 3 weeks of annual leave<br>
<br>
ESS-3350<br>
Host Based Systems Analyst - II - HBA02</p><p>
</p><p>GPv4mzORmd</p></div>

Cyber Network Defense Analysts (CNDA)

Capgemini

<div>
 <strong>
  About Capgemini
  <br/>
  <br/>
 </strong>
 Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.
 <br/>
 <br/>
 <strong>
  Role Description
  <br/>
  <br/>
 </strong>
 Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.
  </li>
  <li>
   Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.
  </li>
  <li>
   Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.
  </li>
  <li>
   Deliver clear, concise status updates for stakeholders at all levels.
  </li>
  <li>
   Prepare comprehensive incident reports tailored to both technical and non-technical audiences.
  </li>
  <li>
   Interpret and present technical cybersecurity subjects to executives.
  </li>
  <li>
   Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.
  </li>
  <li>
   Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.
  </li>
  <li>
   Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.
  </li>
  <li>
   Define, improve, and support incident response processes, playbooks, and methodologies.
  </li>
  <li>
   Contribute to audit support and maintain documentation.
  </li>
  <li>
   Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.
  </li>
  <li>
   Analyze and improve the effectiveness of existing use cases.
  </li>
  <li>
   Develop and deliver documentation, knowledge articles, and visual materials.
  </li>
  <li>
   Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.
  </li>
  <li>
   Stay current on emerging threats, technologies, and regulatory changes.
  </li>
  <li>
   you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience &amp; Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   3+ years in Information Security or related fields.
  </li>
  <li>
   Incident management certifications such as CCIM, GCIH.
  </li>
  <li>
   Technical certifications such as GCFA, CHFI, CFCE.
  </li>
  <li>
   Vendor certifications such as CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.
  </li>
  <li>
   Experience with ITIL frameworks.
  </li>
  <li>
   Technical background in computing, networks, or programming.
  </li>
  <li>
   Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).
  </li>
  <li>
   Industry-recognized certifications such as CISSP or CISM.
  </li>
  <li>
   Proven experience handling cybersecurity incidents and risk management.
  </li>
  <li>
   Strong written and verbal communication skills in English.
  </li>
  <li>
   Experience in digital forensics, threat hunting, or enterprise‑scale incident response.
  </li>
  <li>
   Ability to manage multiple priorities in fast‑paced environments.
  </li>
  <li>
   Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).
  </li>
  <li>
   Broad understanding of the cybersecurity threat landscape.
  </li>
  <li>
   Solid grasp of IT and security methodologies and technologies.
   <br/>
   <br/>
  </li>
 </ul>
 Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
 <br/>
 <br/>
 Get the future you want | www.capgemini.com
</div>


SOC IMR Analyst

NMC Health plc

<div><p>Actively monitor the networks, systems, applications, IT assets and bio-medical equipment&rsquo;s for suspicious activity and threats. Using offensive and defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or may occur within the network and make the initial decision on the event/ threat severity.</p></div>
<br><div><ul><li><p>Manage network, intrusion detection and prevention systems.
</p></li><li><p>Conduct periodic compromise assessments across selected networks and propose recommendations based on assessment results.
</p></li><li><p>Conduct physical security assessment of the organization&rsquo;s systems, including servers and networks, ensuring that any unauthorized external physical interference is not actually possible.
</p></li><li><p>Conduct ongoing network hunt activities.
</p></li><li><p>Conduct proactive vulnerability assessment across the network, subnetworks and service traffic to identify potential points of intrusion.
</p></li><li><p>Research and develop methods of tracking and detecting malicious activity within a network.
</p></li><li><p>Develop tools, signatures, and methods of detection for use in incident response activities.
</p></li><li><p>Develop SIEM integrations, dashboards, and analytics to illuminate and visualize threat activity.
</p></li><li><p>Analyze network traffic to provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
</p></li><li><p>Uses data collected from a variety of cyber defense tools (e.g., anti-virus, IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments, perform cyber defense trend analysis and reporting, and perform event correlation to mitigate threats and gain situational awareness and determine the effectiveness of an observed attack.
</p></li><li><p>Carries out triage to ensure that a genuine security incident is occurring.
</p></li><li><p>Coordinate with entity-wide cyber defense staff to validate network alerts.
</p></li><li><p>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event&rsquo;s history, status, and potential impact for further action in accordance with the organization&rsquo;s cyber incident response plan.
</p></li><li><p>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
</p></li><li><p>Provide daily summary reports of network events and activity relevant to cyber defense practices.
</p></li><li><p>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
</p></li><li><p>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
</p></li><li><p>Isolate and remove malware.
</p></li><li><p>Develop content for cyber defense tools use them for continual monitoring and analysis of network activity to identify malicious activity.
</p></li><li><p>Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within the network environment.
</p></li><li><p>Analyze and report organizational security posture trends.
</p></li><li><p>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus, Threat Intelligence Providers) to maintain updated of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
</p></li><li><p>Provides cybersecurity recommendations based on significant threats and vulnerabilities.
</p></li><li><p>Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operational Plans.
</p></li><li><p>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber incidents within the enterprise.
</p></li><li><p>Use specialized equipment and techniques to catalog, document, extract, collect, package, and preserve digital evidence.
</p></li></ul><p>Utilize deployable forensics toolkit to support operations as necessary</p></div>
<br><div><p><b>Knowledge
</b></p><ul><li><p>Security concepts such as cyber-attacks and techniques, threat vectors, risk and threat management, incident management etc.
</p></li><li><p>Networking concepts and protocols, and network security attacks, vulnerabilities, processes, methodologies, access control mechanisms, traffic analysis methods.
</p></li><li><p>Cyber threats and vulnerabilities and information dissemination sources (e.g., alerts and advisories).
</p></li><li><p>Cyber defense and vulnerability assessment tools and their capabilities.
</p></li><li><p>System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
</p></li><li><p>Scripting languages (e.g., Python, Perl, Bash) used in an incident response environment
</p></li><li><p>Incident response and handling methodologies.
</p></li><li><p>Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools, applications, methodologies and techniques for detecting host and network-based intrusions.
</p></li><li><p>Threat investigations, reporting and investigative tools.
</p></li><li><p>Cyber defense and information security policies, procedures, and regulations.
</p></li><li><p>Common attack vectors, the different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks) and attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
</p></li><li><p>Cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), and attackers&rsquo; methodologies.
</p></li><li><p>Signature implementation impact for viruses, malware, and attacks.
</p></li><li><p>Windows/Unix ports and services.
</p></li><li><p>Relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
</p></li><li><p>Packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
</p></li><li><p>Use of sub-netting tools.
</p></li><li><p>Penetration testing principles, tools, and techniques.
</p></li><li><p>Investigation, auditing and forensics methods, processes, procedures and standards.
</p></li><li><p>Different types of hardware, storage, imaging and file system analysis.
</p></li><li><p>Data backup and recovery.
</p></li></ul><p><b>Skills
</b></p><ul><li><p>Using SIEM/SOAR and Vulnerability Management tools and services.
</p></li><li><p>Sysadmin skills (Linux/Mac/Windows).
</p></li><li><p>Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more).
</p></li><li><p>Identifying, analyzing and interpreting trends or patterns in complex data sets.
</p></li><li><p>Developing and deploying signatures.
</p></li><li><p>Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
</p></li><li><p>Using incident handling methodologies.
</p></li><li><p>Collecting data from a variety of cyber defense resources.
</p></li><li><p>Recognizing and categorizing types of vulnerabilities and associated attacks.
</p></li><li><p>Performing packet-level analysis.
</p></li><li><p>Conducting trend analysis.
</p></li><li><p>Using cyber defense reporting structure and processes.
</p></li><li><p>Utilizing a combination of automated and manual testing methods.
</p></li><li><p>Developing automated vulnerability testing scripts and using off the shelf vulnerability testing tools.
</p></li><li><p>Conducting vulnerability scans and recognizing vulnerabilities in networks, systems and applications.
</p></li><li><p>Using of penetration testing tools and techniques.
</p></li><li><p>Applying analytical and problem-solving skills.
</p></li></ul><p><b>Ability
</b></p><ul><li><p>Collaborate with other sections across the department to enhance detection capabilities.
</p></li><li><p>Perform Malware analysis.
</p></li><li><p>Work closely with management to respond appropriately to the results of assessments and mitigation oversight of found vulnerabilities.
</p></li><li><p>Perform data analysis, correlation, and analytics leveraging Security Information and Event Management (SIEM) tools.
</p></li><li><p>Conduct vulnerability scans and recognize vulnerabilities in security systems &amp; devices.
</p></li><li><p>Accurately and completely source all data used in intelligence, assessment and/or planning products.
</p></li><li><p>Apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
</p></li><li><p>Interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
</p></li><li><p>Prepare and create regular reports to document any security breaches/ incidents.
</p></li><li><p>Provide forensic support to Cyber Security Operations during the investigation of any detected threat or contained incident / event to determine root cause and propose response recommendations as required.
</p></li></ul><p><b>Education and Certification
</b></p><ul><li><p>Bachelor&rsquo;s degree in an information technology, computer science, cyber security or equivalent work experience.
</p></li><li><p>CompTIA Security+
</p></li><li><p>CISSP: Certified Information Systems Security Professional
</p></li><li><p>GCFA: GIAC Certified Forensic Analyst
</p></li><li><p>GCIH: GIAC Certified Incident Handler
</p></li><li><p>GCIA: GIAC Certified Intrusion Analyst
</p></li><li><p>OSCP: Offensive Security Certified Professional
</p></li><li><p>CEH: Certified Ethical Hacker
</p></li><li><p>CPT: Certified Penetration Tester
</p></li></ul><p><b>Experience
</b></p><ul><li><p>3 years of experience in cyber security operations with expertise in managing the Security Operations Center
</p></li><li><p>UAE experience preferred.</p></li></ul></div>

Information Security Specialist

<div><p><b>Title:</b></p>
Cyber Security Analyst<p></p><p><b><i>
Belong. Connect. Grow. with KBR!</i></b></p><p></p><p>
KBR&rsquo;s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country&rsquo;s most critical role &ndash; protecting our national security.</p><p></p><p><b>
Why Join Us?</b></p><ul><li><b>
Innovative Projects:</b> KBR&rsquo;s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.</li><li><b>
Collaborative Environment:</b> Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.</li><li><b>
Impactful Work:</b> Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.</li></ul><p></p><p><b>
Key Responsibilities:</b></p><ul><li>
Perform data integration and synthesis across multiple mission data sources while collaborating closely with stakeholders to develop and operationalize technical concepts in support of mission objectives.</li><li>
Analyze, and contextualize collected data to enhance operational awareness, support partner missions, and identify opportunities to improve analytic workflows, and knowledge management through automation and advanced analytics.</li><li>
Employ a wide range of technical capabilities, including advanced analytics platforms and data management systems, to support mission requirements, improve analytic outcomes, and enable efficient information sharing.</li><li>
Identify, assess, and mitigate technical and operational risks impacting mission execution and analytic integrity.</li><li>
Apply working knowledge of cyber operations to support intelligence analysis, targeting, and mission planning.</li><li>
Utilize technical targeting and mission support tools to enable intelligence analysis and operational objectives.</li></ul><p></p><p><b>
Work Environment:</b></p><ul><li><b>
Location:</b> On-site</li><li><b>
Travel Requirements:</b> Minimal</li><li><b>
Working Hours:</b> Standard</li></ul><p></p><p><b>
Qualifications:</b></p><p><b>
Required:</b></p><ul><li>
Active TS/SCI with a Polygraph</li><li>
Minimum of 7 years of relevant experience</li><li>
Bachelor&rsquo;s Degree in relevant field</li><li>
Demonstrated ability to clearly communicate complex technical and analytic information to both technical and non‑technical audiences, including senior mission and operational stakeholders.</li><li>
Proven experience operating effectively within diverse, multidisciplinary teams in time‑sensitive, mission‑critical environments.</li><li>
Self‑directed and mission‑focused professional with strong analytical reasoning skills and the ability to develop creative solutions to complex technical problems.</li><li>
Demonstrated ability to manage and prioritize multiple concurrent tasks or projects with minimal oversight in a dynamic operational environment.</li></ul><p></p><p><b>
Ready to Make a Difference?</b></p><p>
If you&rsquo;re excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together.</p><p></p><p><b>
KBR Benefits
</b></p><p>KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&amp;D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.</p><p></p><p>
Belong, Connect and Grow at KBR<br>
<br>
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.</p><p></p><p>
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</p></div><p></p>

Cyber Security Analyst

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p><p>
Job Description</p><div><p>
Cyber Intelligence Specialist (CTIC) - TS/SCI Clearance Required<br>
<br>
MEANINGFUL WORK AND PERSONAL IMPACT</p><p>
As a Cyber Intelligence Specialist at GDIT, you will:</p><ul><li><p>
Analyze cyber adversary capabilities by assessing the intentions of adversary groups to conduct Computer Network Exploitation (CNE) and Computer Network Attack (CNA) against ARNG assets.</p></li><li><p>
Evaluate cyber intelligence reports from sources such as DISA, Army, RCC-NG, US-CERT, ARCYBER, NETCOM, and CYBERCOM (up to TS/SCI levels).</p></li><li><p>
Identify emerging threats to hardware and software, recommend risk mitigations, countermeasures, and detection strategies as part of an overarching Computer Network Defense (CND) strategy.</p></li><li><p>
Develop and disseminate actionable cyber intelligence based on adversary Tactics, Techniques, and Procedures (TTPs). Collaborate on the development of enterprise playbooks for automation and orchestration.</p></li><li><p>
Integrate cyber threat intelligence with enterprise vulnerability and asset management data to provide situational awareness to ARNG leadership, RCC-NG teams, SOC analysts, incident responders, and decision-makers.</p></li><li><p>
Proactively identify scalable cybersecurity solutions to enhance existing processes.</p></li><li><p>
Collaborate across multidisciplinary teams to troubleshoot, innovate, and strengthen overall defenses.</p></li></ul><div><br>
WHAT YOU&rsquo;LL NEED TO SUCCEED<br>
<ul><li>Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or related technical discipline (OR equivalent combination of education, certifications, and experience).</li></ul></div><ul><li>Experience: 5+ years of experience in cybersecurity, IT, or information assurance, with expertise in: Cyber Threat Intelligence Tools/Data Feeds: Skilled in integrating news feeds, threat briefs, vulnerability alerts, and technical incident reports. Processes: Threat mitigation methods and CND implementation practices.</li><li>Technical skills:</li></ul><ul><li><p>
Experience with Red Hat Linux and Windows Server Administration (2+ years).</p></li><li><p>
Proficiency with SIEM platforms (e.g., Splunk, Elastic Search) and compliance tools such as SCAP and DISA STIGs (4+ years).</p></li><li><p>
Scripting expertise in PowerShell, Python, or BASH.</p></li><li><p>
Familiarity with TLS/SSL certificate implementation and management.</p></li><li><p>
Nice-to-Have: Experience with VMware ESXi, NetApp SAN storage, or Apache Kafka.</p></li></ul><ul><li>Security clearance level: Active TS/SCI required.</li><li>US citizenship required</li><li>Certifications/Role requirements: Baseline Certification: DoW 8570.01-M IAT Level II (e.g., CompTIA Security+ CE) prior to start. Additional computing environment certification (e.g., CEH, CCNA-Security) required within six months of hire. When 8140 requirements are implemented on program/contract, employees will need to conform to 8140 certification standards.</li></ul><div><br>
GDIT IS YOUR PLACE<br>
At GDIT, the mission is our purpose, and our people are at the center of everything we do.<br>
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Flexibility: Full-flex work week to own your priorities at work and at home.</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul><br>
OWN YOUR OPPORTUNITY<br>
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div><p></p><p>
#GDITPriority</p><p>
#GECOS</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
5 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification<p>
Certified Ethical Hacker (CEH) | EC-Council - EC-Council</p><p>
CompTIA Security+ CE | CompTIA - CompTIA</p></div><div></div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $123,250 - $166,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Cyber Intelligence Specialist - TS/SCI Clearance Required

Technology Ventures

<div>
 <p>
  We are seeking an Cyber Investigations Analyst to support Insider Threat detection, investigation, and response to activities focused on technical and behavioral insider risk. This role will conduct end-to-end investigations including triage, evidence collection, timeline development, and documentation aligned to investigation standards. The analyst will perform hypothesis-driven threat hunting and analysis using SIEM and enterprise telemetry, with a strong understanding of SOC operations, log analysis, and core networking concepts. (TCP/IP, DNS, HTTP/S) The role requires knowledge of insider threat categories such as IP theft, fraud, sabotage, espionage, and unintentional risk, including accidental disclosure. The analyst will identity behavioral indicators of risk, support cross-functional response workflows, and contribute to governed documentation, metrics, and reporting.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Ideal candidates will have experience working in SAC's. Cybersecurity background is a plus as well as investigative work. 3-5 years of experience. Expected to work in Reston 3 times a week.
 </p>
</div>


Search 4679+ Cyber defense analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

4679 cyber defense analyst jobs Near Me

Junior Cyber Defense Operations Analyst

Cyber Network Defense Analysts (CNDA)

SOC IMR Analyst

Information Security Specialist

Cyber Security Analyst

Cyber Intelligence Specialist - TS/SCI Clearance Required

Cyber Security Analyst