cyber defense analyst

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton in Fort Huachuca, AZ is seeking a Defense Cyber Infrastructure Analyst.</div><div><div><div><div><br>
</div></div></div></div><ul><li>
Working as an experienced professional, operates and maintains Intrusion Detection and Prevention Systems (IDPS) and Security Information and Event Management (SIEM) technologies with a specific emphasis on the threat to the Department of Defense (DoD) information networks.</li><li>
Analyzes alerts from various security tools to determine the impact on current operations and identify adversary activity. Develops and implements custom signatures, filters, and rules for IDPS and SIEM technologies to meet changing requirements and ensure maximum operational security.</li><li>
Conducts vulnerability management of the defensive and SIEM architecture to proactively mitigate risks. Produces high-quality analysis, reports, and recommendations for senior cyber defense officials.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><ul><li>
5 years w/BS/BA, 3 years w/MS/MA, 0 years with PhD, 9 years w/o BS/BA</li><li>
Must be able to obtain Basic certification level for DCWF - 511 Cyber Defense Incident Responder within 60 days of employment.</li><li>
Active DoD Secret Clearance</li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

DEFENSE CYBER INFRASTRUCTURE ANALYST - INTERMEDIATE

Nightwing

<div><p>Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers&rsquo; most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.</p><p></p><p>
The DHS&rsquo;s Hunt and Incident Response Team (HIRT) secures the nation&rsquo;s infrastructure. HIRT provides DHS&rsquo;s front-line response for cyber incidents and proactive hunting for malicious cyber activity. Nightwing provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. Nightwing provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. Nightwing is seeking Incident Response Experts to support this critical customer mission.
</p><p><b>This position will require physical presence in the National Capital Region (NCR) for at least 1 week for training and orientation. Subsequent work will be primarily supported outside the NCR.</b></p><p><b>
Responsibilities:</b></p><ul><li>Serves as hunt and incident response subject matter expert (SME), possessing in-depth knowledge on subjects relating to the conduct, activities, or operation of NCCIC HIRT in a surge capacity</li><li>Distills analytic findings into executive summaries and in-depth technical reports</li><li>Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities</li><li>Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives</li><li>Exercises considerable latitude in determining technical objectives of an assignment or task at hand</li><li>Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity</li><li>Guides the completion of hunt and incident response activities</li></ul><p></p><p><b>
Required Skills:</b></p><ul><li>U.S. Citizenship</li><li>Must have an active TS/SCI clearance</li><li>Must be able to obtain DHS Suitability</li><li>8+ years of directly relevant experience in the area of expertise</li><li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])</li></ul>
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)<ul><li>Must be able to travel domestically on short notice</li><li>Ability to think independently</li><li>Demonstrates superior written and oral communication skills</li><li>Must be able to work collaboratively across physical locations</li><li>Skilled in identifying different classes of attacks and attack stages</li><li>Understanding of system and application security threats and vulnerabilities</li><li>Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources</li><li>Proficiency with common operating systems (e,g, Linux/Unix, Windows)</li></ul><p><b><br>
Desired Skills:</b></p><ul><li>Experience leading and mentoring technical teams</li><li>Knowledge of Computer Network Defense policies, procedures and regulations</li><li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])</li></ul>
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)<ul><li>WireShark</li><li>Splunk</li><li>Snort</li></ul><p></p><p><b><br>
Required Education:</b><br>
BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma &amp; 10+ years of technical experience in the area of expertise.</p><p></p><p><b>
Desired Certifications: One or more</b></p><ul><li>DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst</li><li>DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder</li><li>DoD 8140.01 CEH, CSSP Analyst</li><li>SANS GIAC GNFA preferred</li><li>SANS GRID, GICSP, or GCIP a plus</li></ul><p></p><p><i>
At Nightwing, we value collaboration and teamwork. You&rsquo;ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we&rsquo;ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.</i></p><p><i><br>
Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.</i></p><p></p><p><i>
Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.</i></p></div>

Cyber Host Forensic Analyst IV

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton seeks a<b> Cyber Operational Risk Analyst / Data Engineer </b>to join our Mission Assurance and Operations Research Analysis (MA/ORSA) team in support of the Department of Defense Cyber Defense Command (DCDC).</div><div></div><div><br>
Location: Fort Meade, Maryland.</div><div></div><div><br>
In this role, support DCDC with operations research analysis to identify and recommend cyber terrain/activities which may impact the successful execution of DoD missions. Conduct quantitative analysis to the military decision-making processes by developing and applying probability models, statistical inference, simulations, optimization, and economics models.</div><div></div><div><br>
Duties include:</div><ul><li>
Analyze trend reports</li><li>
Perform data collection and analysis, producing studies on cyber terrain types and capabilities to support decision-making</li><li>
Manage and support the weekly execution of a Cyber Operational Analysis Working Group</li><li>
Lead and define operational risk assessments and analyses by cyber-terrain segments</li><li>
Coordinate with DODIN AOs, sector commanders/directors, and other stakeholders to identify and understand the customer&rsquo;s cyber relevant risk, strategies, tolerance, and other factors</li><li>
Incorporate risk assessments, options and issues, and results from wargaming/analyses in collaboration with DoD stakeholders</li><li>
Capture collaboration results with stakeholders in an assessment report (monthly)</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
Required Qualifications:</b></div><ul><li>
Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD</li><li>
Experience with cloud-based data warehousing, specifically the use of the Big Data Platform (BDP)</li><li><div>
Experience writing data parsers for the BDP</div></li><li><div>
Experience with Kafka and Apachi NiFi</div></li><li><div>
Expertise in cloud native data storage services and data warehousing methods</div></li><li><div>
Familiarity with SQL and noSQL data storage methods.</div></li><li>
Understanding of aspects of Defensive Cyberspace Operations</li><li>
Able to work independently and part of a team</li><li>
Able to support shifts (24/7 operations)</li><li>
U.S Citizenship Required</li><li>
Active DOD TS/SCI Clearance or the ability to obtain SCI</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

CYBER OPERATIONAL RISK ANALYST / DATA ENGINEER

<div><p><b>Title:</b></p>
NOSC Cyber Analyst<p></p><p><b><i>
Belong. Connect. Grow. with KBR!</i></b></p><p></p><p>
KBR&rsquo;s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country&rsquo;s most critical role &ndash; protecting our national security.</p><p></p><p><b>
Why Join Us?</b></p><ul><li><b>
Innovative Projects:</b> KBR&rsquo;s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.</li></ul><ul><li><b>
Collaborative Environment:</b> Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.</li><li><b>
Impactful Work:</b> Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.</li></ul><p></p><p><b>
Responsibilities:</b></p><ul><li>
Planning, modeling, simulation, design, installation, maintenance, management, and coordination of the network.</li></ul><p></p><p><b>
Work Environment:</b></p><ul><li><b>
Location: </b>On-Site &ndash; Joint Base Anacostia-Bolling, Washington, DC</li><li><b>
Travel Requirements:</b> Minimal</li><li><b>
Working Hours:</b> Standard</li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li>
Top Secret with SCI</li></ul><ul><li>
Coordinate across the enterprise to ensure network security devices are being monitored and are receiving or generating alerts</li><li>
Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security</li><li>
Perform network traffic analysis utilizing raw packet data, net flow, IDS, IPS and custom sensor output, as it pertains to the cyber security of communications networks</li><li>
Device monitoring of tiered alerts for all operational networks</li><li>
Maintain documentation for processes and procedures</li><li>
Create incident reports providing both high level and in-depth details for investigations.</li><li>
Lead investigations and mentor junior analysts</li><li>
Develop training pipeline and brown bag sessions for team cross training</li></ul><p></p><p><b>
Desired Qualifications:</b></p><ul><li>
8 years of Incident Handler/Incident Response experience</li><li>
Requires ability to lead cyber investigation and brief updates to customer and team lead</li><li>
Requires current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)</li><li>
Requires current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)</li></ul><p></p><p><b>
Basic Compensation:</b> <b>$149,400 &ndash; 224,100 (This range is for Washington, DC only)</b></p><p>
The offered rate will be based on the selected candidate&rsquo;s knowledge, skills, abilities and/or experience and in consideration of internal parity.</p><p><b><br>
Additional Compensation:</b></p><p>
KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.</p><p></p><p>
Belong, Connect and Grow at KBR<br>
<br>
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.</p><p></p><p>
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</p></div><p></p>

NOSC Cyber Analyst

Arcis Golf

<div>
 <strong>
  Club Location:
  <br/>
  <br/>
 </strong>
 Arcis Golf - Corporate Office - Dallas, TX
 <br/>
 <br/>
 Arcis Golf team members thrive on anticipating needs, forging connections, and elevating experiences for our team, members, and guests. We are an inclusive team of unique individuals who show up each day with a grateful spirit, humble heart, and a genuine respect for one another.
 <br/>
 <br/>
 The Cyber Security Analyst will prepare and defend our networks, data and systems (on-premise and in the cloud) from attack. They will use an understanding of tactics, techniques, and procedures used by attackers and apply that knowledge to assist in the investigation of cyber-attacks in order to ensure steps are taken to mitigate the threat and help the team to track all security incidents to closure.
 <br/>
 <br/>
 The Security Analyst will work on activities such as incident response, logging/monitoring support, application security, configuration reviews, and configuration and maintenance of various security controls, both on premise and on cloud infrastructure. They will assist on creating and revising information security standards and policies as well as create and produce applicable metrics .
 <br/>
 <br/>
 <ul>
  <li>
   Responsibilities
  </li>
  <li>
   Participate in vulnerability management related activities including the identification, prioritization and directing the remediation of security related vulnerabilities .
  </li>
  <li>
   Design, develop, implement, and maintain security documentation.
  </li>
  <li>
   Document all tickets and alerts worked on in the required SLA.
  </li>
  <li>
   Monitor and respond to SIEM alerts in conjunction with our MSSP
  </li>
  <li>
   Participate in rotational on-call responsibilities
  </li>
  <li>
   Education and Experience
  </li>
  <li>
   3 years of related security experience
  </li>
  <li>
   Deep understanding of cyber incident response processes and procedures.
  </li>
  <li>
   Familiarity with network forensics including PCAP analysis, network security, and IDS/IPS analysis.
  </li>
  <li>
   Understanding of Cyber Threat Intelligence and Cyber Security Awareness concepts.
  </li>
  <li>
   In-depth understanding of Windows operating systems
  </li>
  <li>
   Knowledgeable with various security infrastructure tools such as intrusion prevention/detection systems, anti-virus/endpoint detection and response, proxy servers, email controls, and SIEM.
  </li>
  <li>
   Ability to work as part of a team, show initiative and take on new tasks as assigned.
  </li>
  <li>
   Ability to perform risk analysis and communicate that risk to others.
  </li>
  <li>
   General understanding of AWS, Azure, and/or Google Cloud.
  </li>
  <li>
   SANS GIAC (GSEC, GCIA, GCIH, GCFA, etc.), CISSP, CEH, Security+, or similar information security certifications.
  </li>
  <li>
   Scripting experience
  </li>
  <li>
   Azure experience a plus
  </li>
  <li>
   General system and/or network administration experience.
  </li>
  <li>
   Cloud Security Experience (AWS and Azure).
  </li>
  <li>
   Bachelor&rsquo;s degree in related field of study, preferred.
  </li>
  <li>
   Security+ or other technical certifications, preferred
   <br/>
   <br/>
  </li>
 </ul>
 Arcis Golf provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
 <br/>
 <br/>
 Arcis participates in E-Verify, the government program that certifies an employee's right to work for us in the U.S.
</div>


Cyber Security Analyst

Orbis

<div>
 <strong>
  This is a proposal requisition. Work will begin only if the contract is awarded.
  <br/>
  <br/>
 </strong>
 Orbis is looking for a
 <strong>
  Cyber Ops Specialist
 </strong>
 to support critical mission operations in the Washington Metro Area. The role monitors, detects, analyzes, and responds to cyber threats across enterprise networks and mission systems, safeguarding data, infrastructure, and operations in alignment with Mission Center objectives.
 <br/>
 <br/>
 <strong>
  <strong>
   Duties/Responsibilities
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Continuously monitor network, host, and cloud telemetry (e.g., logs, flows, alerts) to detect anomalies and potential security incidents.
  </li>
  <li>
   Identify, triage, and escalate events; distinguish true positives from benign activity; coordinate with incident responders and stakeholders.
  </li>
  <li>
   Conduct analysis to isolate indicators of compromise (IOCs), tactics/techniques/procedures (TTPs), and likely avenues of attack; document findings and recommended actions.
  </li>
  <li>
   Perform threat hunting using security-relevant data to uncover trends, patterns, and correlations indicative of adversary activity.
  </li>
  <li>
   Support vulnerability assessments and identify single points of failure; recommend mitigations to improve resilience and defense-in-depth.
  </li>
  <li>
   Assist with requirements development and the integration, testing, verification, and validation of cyber monitoring and defensive capabilities in lab and operational environments.
  </li>
  <li>
   Review technical reports/white papers and feasibility studies for operational relevance and technical soundness; contribute to CONOPs, SOPs, and playbooks.
  </li>
  <li>
   Prepare clear, concise briefings and reports that articulate an event&rsquo;s history, status, and operational impact in accordance with the incident response plan.
  </li>
  <li>
   Collaborate with Systems Engineers, System Integrators, mission engineering teams, and Government stakeholders to align detection and response with mission priorities.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Work Schedule
  <br/>
  <br/>
 </strong>
 Position may require rotating shift coverage to support 24/7 operations, including nights, weekends, and holidays; shift differential may apply per company policy.
 <br/>
 <br/>
 <strong>
  <strong>
   Supervisory Responsibilities
   <br/>
   <br/>
  </strong>
 </strong>
 This position has no supervisory responsibilities.
 <br/>
 <br/>
 <strong>
  <strong>
   Required Education And Experience
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in cybersecurity, computer science, information systems, engineering, or a related field; an additional 4 years of relevant experience may substitute for a degree.
  </li>
  <li>
   5+ years of hands-on cyber defense, SOC, incident response, or threat hunting experience in enterprise or mission environments.
  </li>
  <li>
   Experience analyzing security telemetry and conducting event triage, IOC development, and incident documentation.
  </li>
  <li>
   Experience supporting integration and testing of defensive cyber capabilities (e.g., sensors, logging, or analytics pipelines).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <strong>
   Preferred Education And Experience (not Required To Apply)
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Master&rsquo;s degree in a relevant technical field.
  </li>
  <li>
   8&ndash;10+ years of cyber operations or incident response experience supporting mission-focused environments.
  </li>
  <li>
   Experience with feasibility reviews, trade studies, vulnerability assessments, or architecture evaluations.
  </li>
  <li>
   Exposure to field operations, deployed systems, or operational test environments.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <strong>
   Required Education And Experience
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   U.S. Citizenship.
  </li>
  <li>
   Active TS/SCI with Polygraph security clearance.
  </li>
  <li>
   Understanding of cybersecurity principles and threat analysis methodologies; ability to correlate data from multiple sources.
  </li>
  <li>
   Strong analytical and problem-solving skills; ability to work independently and within multidisciplinary teams.
  </li>
  <li>
   Excellent written and verbal communication skills; ability to produce clear technical documentation and brief diverse audiences.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <strong>
   Preferred Skills &amp; Abilities
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Experience developing or refining incident response playbooks, CONOPs, and SOPs.
  </li>
  <li>
   Experience identifying single points of failure and recommending mitigations across networked systems.
  </li>
  <li>
   Familiarity with forensics triage, malware analysis coordination, or red/blue team operations.
  </li>
  <li>
   Proficiency with common defensive tools and data types (e.g., SIEM, endpoint telemetry, network sensors, system/event logs).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  <strong>
   Physical Requirements
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Prolonged periods working at a computer; routine video conferences and/or in-person meetings.
  </li>
  <li>
   Ability to attend planned meetings across the Washington Metro Area.
  </li>
  <li>
   Work may be performed in classified environments per Sponsor direction.
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status.
 </em>
</div>


Cyber Ops Specialist

One Network

<p>The requisition for a SOC Analyst experienced in FortiSIEM, FortiSOAR, and FortiXDR is required to support the Safe City Islamabad project, which operates a mission-critical and highly sensitive infrastructure. Continuous security monitoring, rapid incident response, and automated threat handling are essential to protect surveillance systems, networks, and operational data. A dedicated SOC resource will ensure timely detection and containment of cyber threats while maintaining service availability and strengthening the overall security posture.</p><p>Analyst will be responsible for real-time security monitoring and alert analysis using SIEM, investigation and containment of threats through XDR, and execution of automated response playbooks in SOAR. The role includes incident triage, escalation, and coordination with internal teams to ensure timely remediation. The analyst will also assist in tuning security rules, onboarding log sources, and preparing incident and compliance reports to support secure operations.</p><p>Actively monitor and analyze security events, alerts, and logs using SIEM, SOAR, EDR, Threat Intelligence and Cloud Security platforms.</p><p>&middot; Investigate incidents to mitigate risks. Define and refine SOC automation workflows, including playbooks, alerts, reports, and dashboards, to improve threat detection and incident response.</p><p>&middot; Tune SIEM correlation rules, policies, and alerts to reduce false positives and improve detection accuracy.</p><p>&middot; Investigate security incidents such as malware infections, phishing attempts, lateral movement, privilege escalation, and data exfiltration.</p><p>&middot; Coordinate with IT and security teams for incident containment, eradication, and recovery.</p><p>&middot; Prepare detailed incident reports, root cause analysis (RCA), and post-incident documentation.</p><p>&middot; Assist in onboarding new log sources and security devices into FortiSIEM.</p><p>&middot; Support compliance and audit requirements (ISO 27001, SOC 2, PCI-DSS, etc.) by providing logs and incident evidence.</p><p>&middot; Continuous Learning: Actively engage in continuous learning by staying informed about the latest cybersecurity threats, vulnerabilities, and industry best practices.</p><ul><li>&bull; NSE 5 / NSE 6, CEH or similar SOC/IR Certifications.</li></ul><p>BS in Computer Science, Information Security, Information Technology and relevant.</p><p>Hands on Experience with FortiSIEM, SOAR and XDR.</p><p>Job Type: Full-time</p><p>Pay: Rs130,000.00 - Rs170,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>as Cyber Security Analyst	: 3 years (Preferred)</li></ul><p>License/Certification:</p><ul><li> NSE 5 / NSE 6, CEH or similar SOC/IR Certifications. (Preferred)</li></ul><p>Work Location: In person</p>

Search 5884+ Cyber defense analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

5884 cyber defense analyst jobs Near Me

DEFENSE CYBER INFRASTRUCTURE ANALYST - INTERMEDIATE

Cyber Host Forensic Analyst IV

CYBER OPERATIONAL RISK ANALYST / DATA ENGINEER

NOSC Cyber Analyst

Cyber Security Analyst

Cyber Ops Specialist

Cyber Security Analyst