cyber defense analyst

Capgemini

<div><div><div><p>Cairo</p><div>
SOC IMR Analyst</div><p>
</p></div></div><div></div><div><div><div><div><div><p><b>
About Capgemini</b></p><p>
Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.</p><div></div><div><div><div><p><b>
Role Description:</b></p><p>
</p><p>Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.</p><p>
</p><p><b>Key Responsibilities:</b></p><ul><li>
Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.</li><li>
Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.</li><li>
Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.</li><li>
Deliver clear, concise status updates for stakeholders at all levels.</li><li>
Prepare comprehensive incident reports tailored to both technical and non-technical audiences.</li><li>
Interpret and present technical cybersecurity subjects to executives.</li><li>
Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.</li><li>
Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.</li><li>
Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.</li><li>
Define, improve, and support incident response processes, playbooks, and methodologies.</li><li>
Contribute to audit support and maintain documentation.</li><li>
Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.</li><li>
Analyze and improve the effectiveness of existing use cases.</li><li>
Develop and deliver documentation, knowledge articles, and visual materials.</li><li>
Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.</li><li>
Stay current on emerging threats, technologies, and regulatory changes.</li><li>
you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities</li></ul><p>
</p><p><b>Experience &amp; Qualifications:</b></p><ul><li>
3+ years in Information Security or related fields.</li><li>
Incident management certifications such as<b> CCIM, GCIH.</b></li><li>
Technical certifications such as <b>GCFA, CHFI, CFCE.</b></li><li>
Vendor certifications such as <b>CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.</b></li><li>
Experience with ITIL frameworks.</li><li>
Technical background in computing, networks, or programming.</li><li>
Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).</li><li>
Industry-recognized certifications such as <b>CISSP or CISM.
</b></li><li>Proven experience handling cybersecurity incidents and risk management.</li><li>
Strong written and verbal communication skills in English.</li><li>
Experience in digital forensics, threat hunting, or enterprise‑scale incident response.</li><li>
Ability to manage multiple priorities in fast‑paced environments.</li><li>
Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).</li><li>
Broad understanding of the cybersecurity threat landscape.</li><li>
Solid grasp of IT and security methodologies and technologies.</li></ul></div></div></div><div>
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
</div><div></div><div>Get the future you want | www.capgemini.com
</div></div></div><div><div><div><div><div>Ref. code</div><div>
413452-en_US</div></div><div><div>
Posted on</div><div>
18 Feb 2026</div></div><div><div>
Experience level</div><div>
Experienced Professionals</div></div><div><div>
Contract type</div><div>
Permanent</div></div><div><div>
Location</div><div>
Cairo</div></div><div><div>
Business unit</div><div>
Other Delivery units</div></div><div><div>
Brand</div><div>
Capgemini</div></div><div><div>
Professional communities</div><div>
Cybersecurity</div></div></div></div></div></div></div></div></div><p></p>

SOC IMR Analyst

Centuria Corporation

<div><div><b>Job Title: Cybersecurity Analyst</b></div><div><b>
Location: Hanscom Air Force Base, MA</b></div><div><b>
Clearance: Secret</b></div><div><b>
Program: BLITS 3.0</b></div><div></div><div><b><br>
Company/ Program Description:
</b></div><div>Centuria, a Service-Disabled Veteran-Owned Small Business (SDVOSB), has been delivering IT, Engineering, and Scientific solutions to the Federal Government since 2002. During our two decades of service, we have earned the trust and respect of our government clients through technical excellence, accountability, and mission commitment.</div><div>
</div><div>
The BLITS 3.0 Program supports the mission of the 66th Air Base Group to secure information systems, maintain mission assurance, and ensure operational readiness. This role supports enterprise cybersecurity operations by leading vulnerability management efforts across mission systems and infrastructure supporting installation and enterprise operations.</div><div>
</div><div><b>
Job Responsibilities:
</b></div><ul><li> Provides Information Assurance guidance and support to the customer community in accordance with Federal, Department of Defense, and U.S. Air Force Information Assurance programs</li><li> Ensures that applicable systems/networks/computing environments meet security requirements and that all security risks for those environments are properly mitigated</li><li> Provides technical and programmatic Information Assurance/Cyber Security services in support of system-level certification and accreditation processes</li><li> Tracks and manages all open security-related problem reports and fixes</li><li> Provide necessary support for Certification and Accreditation (C&amp;A) requirements as well as re-accreditation requirements</li><li> Ensures configuration management for systems/networks/computing systems and hardware is documented and maintained. Support creation/management/processing of accounts, DLP</li><li> Contribute to Cybersecurity projects as required</li><li> Provide support with Classified Message Incidents</li><li> Reviews all Information Assurance Vulnerability Management (IAVM) alerts, bulletins, and Security Technical Implementation Guides (STIGS) for applicable implementation and remediation in the customer&rsquo;s network/computing environment(s)</li><li> Perform Staff Assistant Visits and reach back support with appointed ISSOs
</li><li> Provide support to maintain a comprehensive network security policy to include firewall exceptions</li><li> Create, review, and update standard operating procedures and AF Checklists</li><li> Review FFRDC System Security Plans and provide support as needed</li><li> Assist with TEMPEST certification for Classified Processing Areas</li></ul><div>
</div><div><b>
Job Requirements:
</b></div><ul><li> Strong knowledge of Air Force, DoD and applicable Federal Information Assurance/Cyber Security Directives and Instructions</li><li> Positive communication Skills/Self-motivation</li><li> Knowledge of Cyber Security in the RMF process and Cyber Defense</li><li> Ability to capture and report metrics</li><li> Working knowledge of SharePoint</li><li> Windows Desktop Operating Systems (Windows 10/Windows 11)
</li><li> Working knowledge of Microsoft Active Directory
</li><li> Microsoft Office Products &ndash; Must have proficiency in Excel
</li><li> Working knowledge of Service Now ticketing system</li><li> Ability to resolve issues quickly and efficiently
</li><li> Proficient with Computer and Server Hardware</li><li> Strong Team Partnership skills</li><li> Strong Troubleshooting skills
</li><li> Strong customer service skills
</li><li> Strong written and verbal communication skills</li><li> Secret level DoD security clearance - required (ability to get clearance with waiver possible if background check shows potential)</li><li> CompTIA Security + certification - required (valid certification on day one of employment)</li><li> BS/BA degree with 3+ years of experience relevant to the above skills. An additional 4 years of experience may substitute for the degree</li></ul><br>
<div></div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Cybersecurity Analyst

Amentum

<div></div><div><div><div><div><div><p><b>RED CELL CYBER ANALYST (Operational Position)
</b></p><p></p><p>The Red Cell Cyber Analyst is responsible for providing direct strategic and tactical analytic cyber support to the DoW Red Cell. The Red Cell Cyber Analyst drives cyber operations by selecting cyber targets, identifying gaps in cyber architecture, and developing cyber emulative courses of action pertaining to specific vulnerability assessments. The Red Cell Cyber Analyst is responsible for providing advice to tactical partner elements and Red Cell personnel in planning adversarial cyber warfare courses of action. The Red Cell Cyber Analyst is responsible for providing advisory support concerning network and infrastructure analysis to enable adversarial cyber and/or electronic warfare operations in support of DoW Red Cell operations. The Red Cell Cyber Analyst will be expected to travel in direct support of vulnerability assessments.</p>
<p></p>
<p>The Red Cell Cyber Analyst acts as subject matter expert on a variety of complex topics related to cyber threats. Specifically, the Red Cell Cyber Analyst is responsible for researching and identifying positions, access points, relationships, organizations, and other potential vulnerabilities in support of DoW Red Cell operations. They are expected to use advanced analytic skills/ tools and maintain knowledge of industry best practices related to cyber red teaming. They report directly to the Red Cell Cyber Analysis Lead.</p>
<p></p>
<p><b>Responsibilities/Tasks</b></p>
<p></p>
<p>The Red Cell Cyber Analyst shall:</p>
<ul>
<li>Characterize the adversary&rsquo;s cyber capabilities. Research the structure, ideology, intentions, tactics, and capabilities of adversarial cyber organizations to develop threat characterization using a combination of both classified and unclassified sources.</li>
<li>Contribute constructively to cyber threat emulation. Identify information requirements, develop assessment cyber strategies, assist building Red Cell collection plans, identify information sources, and develop and conduct research of publicly available information (PAI) in order to determine adversary cyber courses of action and relevant priority information requirements (PIRs).</li>
<li>Identify, map, and plan potential exploitation of key telecommunication networks.</li>
<li>Analyze and characterize cyber systems and conduct analysis appropriate to the program. Identify essential functions, tasks, and critical assets necessary to perform analysis as determined by the program leader.</li>
<li>Develop courses of action that a cyber adversary might employ against customer personnel, equipment, facilities, networks, information and information systems, infrastructure, and supply chains.</li>
<li>Facilitate timely information management flow from DoW Red Cell partner elements and other entities supporting DoW Red Cell operations.</li>
<li>Support field assessments from a cyber adversary perspective.</li>
<li>Synthesize findings to support vulnerability identification, course of action development, protection studies, trend analyses, risk analysis, and mitigation strategies.</li>
<li>Develop a comprehensive understanding of the implications of cyber vulnerabilities discovered and fuse those findings with the systems analysis to determine impacts to the national and military missions they support.</li>
<li>Prepare activity reports including out briefs, senior leader briefs, interim progress reports (IPRs), white papers, after action reviews, final reports, risk analysis products, and other documents necessary to convey assessment findings to customers, partners, and other stakeholders.</li>
<li>Be able to explain network/system mechanisms to non-cyber personnel in order to facilitate better analysis and operations.</li>
<li>Should have a diverse understanding of network and information security operations, network exploitation, and telecommunications.</li>
</ul>
<p></p><p><b>Required Skills/Qualifications</b></p>
<p></p>
<ul><li>Four-year BS/BA degree with two years applicable experience as a cyber analyst; or associate&rsquo;s degree with four years applicable experience as a cyber analyst; or eight years of applicable experience as a cyber analyst.</li>
<li>Proficient in understanding, analyzing and summarizing comprehensive and complex technical, contractual, and research information/data.</li>
<li>Ability to write about complex topics in a way that will effectively capture and transmit the message to non-cyber personnel.</li>
<li>Ability to communicate complex informational concepts or ideas in a confident and well-organized manner through verbal, written, and visual means.</li>
<li>Ability to accurately and completely source all data used in products.</li>
<li>Ability to develop or recommend analytic approaches to problems for which information is incomplete or for which no precedent exists.</li>
<li>Ability to think like and emulate actions of threat actors.</li>
<li>Possess a current driver's license.</li>
<li>Capable of operating a rental vehicle.</li>
<li><b>Active TS/SCI clearance required.</b></li>
<li><b>U S citizenship required.</b></li>
<li>Travel is up to 20%</li>
</ul>
<p></p><p><b>Desired Skills/Qualifications</b></p>
<p></p>
<ul><li>Understand and be well versed in common cyber threat terminology, vulnerability and penetration test principles and methodologies; possess basic knowledge of cyber incident and response forensics and related current events.</li>
<li>Familiarity with Log Analysis, Packet Analysis OSI Model, Network Architectures, NIST, DIA-CAP, RMF, and Information Operations, threat intelligence activities including the collection of and tracking threat actors, digital forensics incident response; and threat hunting methodologies.</li>
<li>Experience performing attack analysis or Red Cell penetration testing against operational computer networks including experience in Windows Security, Network Security, Linux/Unix Security, Database security, or Mainframe Security.</li>
<li>Knowledge of common computer/network infections (virus, trojan, etc.) and methods of infection (ports, attachments, etc.).</li>
<li>Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.)</li></ul><br>
<p></p>
</div></div></div></div><p>
</p><p><b>Compensation Details:</b></p>
105,000<p><br>
</p><p>The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.</p><p></p><p><b><br>
Benefits Overview:</b></p><p>
Our health and welfare benefits are designed to support you and your priorities. Offerings include:</p><ul>
<li><p>
Health, dental, and vision insurance</p></li>
<li><p>
Paid time off and holidays</p></li>
<li><p>
Retirement benefits (including 401(k) matching)</p></li>
<li><p>
Educational reimbursement</p></li>
<li><p>
Parental leave</p></li>
<li><p>
Employee stock purchase plan</p></li>
<li><p>
Tax-saving options</p></li>
<li><p>
Disability and life insurance</p></li>
<li><p>
Pet insurance</p></li></ul><p></p><p><i><br>
Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.</i></p><p><br>
</p><p><b>Original Posting:</b></p>
02/23/2026 - Until Filled<p>
Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.</p><p><br>
</p><p>Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.</p></div>

Red Cell Cyber Analyst

<div><p><b>Title:</b></p>
Defensive Cyber Operations - Space Analyst<p></p><p>
KBR is seeking a Defensive Cyberspace Operations &ndash; Space Analyst to support of Combat Forces Command located on Peterson Space Force Base, Colorado Springs, CO.</p><p></p><p>
An active TS/SCI clearance is MANDATORY, which is something only a U.S. citizen can obtain.</p><p></p><p>
A strong candidate has a comprehensive knowledge of DCO-S capabilities and space weapon systems and/or mission areas. In this position, you will:</p><p></p><p><b>
Key Responsibilities:</b></p><ul><li>
Architect and evolve Defensive Cyberspace Operations (DCO) standards to guide the secure development and defense of critical space weapon systems.</li><li>
Drive strategy, policy, and prioritization for the integration of cyberspace operations across the U.S. Space Force (USSF) enterprise.</li><li>
Lead strategic technical planning and analysis to define the roadmap for current and future cyberspace capabilities and investments.</li><li>
Engineer and implement proactive defensive cyberspace capabilities to protect mission systems from emerging and persistent threats.</li><li>
Conduct comprehensive technical reviews and assessments of cyberspace capabilities and weapon systems to identify vulnerabilities and ensure mission readiness.</li><li>
Author foundational doctrine, including Concepts of Operations (CONOPS) and Operating Concepts, that will shape the execution of cyberspace missions in the space domain.</li><li>
Develop and formalize training and exercise requirements to validate and advance the proficiency of cyberspace mission forces.</li><li>
Integrate cutting-edge cyberspace effects and analytics to build resilient, proactive defenses for vital USSF weapon systems.</li><li>
Travel may be required (~1-3 trips per year for ~5 days each) to support key stakeholder events, exercises, and technical interchange meetings.</li></ul><p></p><p><b>
Qualifications:</b></p><p><b>
Required:</b></p><ul><li>
An active TS/SCI clearance is required to be considered for this job, which is something only a U.S. citizen can obtain.</li><li>
Current CompTIA Security+ certification (or equivalent DoD 8570 IAT Level II certification).</li><li>
Experience with translating operational needs into validated capability requirements.</li><li>
Proven experience providing strategic advice, technical guidance, and in-depth analysis within a headquarters or equivalent command-level environment.</li><li>
Demonstrated ability to prepare and deliver high-quality products, including briefings, point papers, memorandums, orders, and formal staff packages for senior leadership.</li><li>
A proactive and adaptable self-starter with the ability to manage competing priorities and rapidly pivot across multiple work responsibilities.</li><li>
Exceptional interpersonal skills with the ability to collaborate effectively with senior leaders, staff, and stakeholders across internal and external organizations.</li><li>
A methodical and analytical approach to problem-solving, with experience following established protocols, developing solutions, and documenting outcomes.</li><li>
Excellent verbal and written communication skills, capable of conveying complex technical information to diverse audiences.</li><li>
Proficient with Microsoft Office Suite.</li><li>
Must be willing and able to work daily within a Secure Compartmented Information Facility (SCIF).</li></ul><p></p><p><b>
Desired:</b></p><ul><li>
Bachelor of Arts (BA) or Bachelor of Science (BS) degree from an accredited institution.</li><li>
Demonstrated experience with the Joint Capabilities Integration and Development System (JCIDS) process; knowledge of the Software Acquisition Pathway is highly desired.</li><li>
In-depth experience with U.S. Space Force weapon systems, platforms, and associated mission areas.</li><li>
Prior experience serving on a headquarters staff for a military Service, Combatant Command, Field/Major Command, or an equivalent high-level organization.</li><li>
Proven experience in the development of Joint- or Service-level strategy, doctrine, or operational concepts.</li><li>
Experience in operations integration, planning, and long-term sustainment of complex systems or capabilities.</li><li>
Direct experience in cyberspace operations or cyberspace support roles, such as assignments with USCYBERCOM, a Service Cyber Component (e.g., 16th Air Force), or a tactical/operational cyberspace unit (e.g., Cyberspace Wing, Network Warfare Squadron, Cyberspace Operations Squadron).</li></ul><p></p><p><b>
Scheduled Weekly Hours:
</b></p><p>40hrs</p><p></p><p><b>
Work Environment:</b></p><ul><li><b>
Location:</b> On-site</li><li><b>
Travel Requirements:</b> Minimal 0-20%</li><li><b>
Working Hours:</b> Standard</li></ul><p></p><p><b>
Basic Compensation:</b></p><p>
$120,000 - $135,000</p><p></p><p>
This range is for Colorado only.</p><p></p><p>
The offered rate will be based on the selected candidate&rsquo;s knowledge, skills, abilities and/or experience and in consideration of internal parity.</p><p></p><p><b>
KBR Benefits
</b></p><p>KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&amp;D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.</p><p></p><p><b><i>
Belong. Connect. Grow. with KBR!</i></b></p><p>
KBR&rsquo;s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country&rsquo;s most critical role &ndash; protecting our national security.</p><p></p><p><b>
Why Join Us?</b></p><ul><li><b>
Innovative Projects:</b> KBR&rsquo;s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.</li><li><b>
Collaborative Environment:</b> Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.</li><li><b>
Impactful Work:</b> Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.</li></ul><p></p><p>
Belong, Connect and Grow at KBR<br>
<br>
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.</p><p></p><p>
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</p></div><p></p>

Defensive Cyber Operations - Space Analyst

Dominion Energy

<p></p><div><p>Dominion Energy is committed to providing reliable, affordable, and increasingly clean energy that powers our customers every day. If you want to work for a purpose-driven company that values safety and collaboration, we&rsquo;re looking for you. You won&rsquo;t just find a job here; you&rsquo;ll find your career. Review the position below and apply today.</p><br>
<p></p>
<p></p><p>Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity.<br>
<br>
At this time, Dominion Energy cannot transfer or sponsor a work visa or employment authorization for this position.</p><br>
<p></p><div><div><div><h2 class="jobSectionHeader"><b>Job Summary</b></h2>
</div><div><p>
Dominion Energy&rsquo;s Power Generation Business Unit seeks a Generation Cyber Security Analyst / Senior Cyber Security Analyst to support the Power Generation fleet (non-nuclear) with computer, communications, and network security in Operational Technology (OT) Industrial Control System (ICS) environments and ICS Cyber Security environments.</p>
<p>
Greensville cyber analyst home facility will be at Greensville Power station. The Cyber Analyst will also have regional travel to support surrounding stations and other Cyber Analysts at stations in the South Central Virginia and Northern North Carolina region along with occasional travel to corporate office.</p>
<p>
The successful candidate will be able to provide the support noted below in accordance with standards, best practices, and regulatory requirements, for the operating units and auxiliary systems:</p>
<ul>
<li>Provide ongoing support and oversight for the Industrial Control System (ICS) cyber security and secure network communications. (e.g.: SCADA Control Systems, DMZ Communications and Replication</li>
<li>Systems/Software, Programmable Logic Controller systems (P.L.C.), Distributed Control Systems (D.C.S., etc.)</li>
<li>Recommend and support the implementation of architectures necessary for Power Generation&rsquo;s cyber security and compliance posture.</li>
<li>Design, Implement and manage system installations, modifications, and integration of communication protocols and programs/tools in support of secure ICS data and control communications.</li>
<li>Provide hands on support with computer, software, and network device implementations, account management and review, security hardening, modifications, updates, patches, troubleshooting, and replacement.</li>
<li>Research, develop, and implement cyber security architectures and communications necessary to maintain the plant cyber security and compliance posture.</li>
<li>Uphold responsibilities in support of Power Generation and related cyber security project implementations and initiatives.</li>
<li>Develop and implement secure software and network communication architectures to support data and access communication needs.</li>
<li>Provide firewall rule development, review, and investigation and coordinate with Power Generation Cyber Security and Information Technology (IT) Groups.</li>
<li>Provide cyber security and communications related monitoring, surveillance, and troubleshooting.</li>
<li>Support cyber security event investigation at sites in coordination with the Incident Response Teams.As needed: review, analyze, and investigate logs, events, and alerts for potential security breaches.</li>
<li>Monitor cyber security best practices, industry trends, and regulatory requirements while identifying gaps in cyber security controls and recommend/implement technical or administrative solutions to remediate.</li>
<li>Follow policy and procedures established by Power Generation Regulatory Compliance and Corporate Cyber Security.</li>
<li>Support deployment of cyber security equipment patches and upgrades in accordance with policy.</li>
<li>Review and approve change management and design change packages for cyber security and compliance impacts.</li>
<li>Address and resolve ICS-CERT vulnerabilities in coordination with compliance and station personnel.</li>
<li>Develop technical procedures and guidance documents.</li>
<li>Mentor other staff members to broaden knowledge and technical expertise across the team.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Required Knowledge, Skills, Abilities &amp; Experience</b></h2>
</div><div><p>
The knowledge, skills, abilities and experiences that are required for entry into this job include the following:</p>
<p><b>
Generation Cyber Security Analyst</b> : 3+ years of relevant directly related experience</p><br>
<p></p>
<p><b>
Generation Cyber Security Sr Analyst: </b>At least 5 years of experience in IT/OT cyber security, system administration, networks, firewalls, and management of Windows operating systems security - or - 7 years of a combination of this experience and ICS experience.</p><br>
<p></p>
<p><b>
Must have a &lsquo;hands on&rsquo; experience/understanding utilizing cyber security processes and technologies including:</b></p>
<ul>
<li>Cyber security technologies such as network intrusion detection systems, logging and monitoring tools, antivirus tools, whitelisting tools, malware prevention tools, incident response tools, asset inventory systems and security analytics platforms</li>
<li>NERC CIP Medium requirements</li>
<li>Incident analysis, root cause analysis, and problem resolution</li>
<li>An understanding of industrial control system networks, switches, and firewalls, and the differences of these OT systems from IT systems when applying cyber security controls.</li>
<li>Strong experience with workstation and server security, protection, and software.</li>
<li>Experience in security aspects of multiple platforms, operating systems, software, communications, and network devices, architectures and topologies.</li>
<li>Strong Experience with Network devices (network switches, firewalls, routers)</li>
</ul>
<p><b>Other requirements:</b></p>
<ul>
<li>Strong level of understanding of security principles, technologies, best practices, and NIST, CISA, and DoE ICS guidance.</li>
<li>Excellent analytical and problem-solving skills.</li>
<li>Ability to coordinate multiple projects and assignments concurrently and manage deadlines.</li>
<li>Strong verbal, written, interpersonal and leadership skills.</li>
<li>Ability to successfully work both independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight.</li>
</ul>
<p><b>Preferred Skills:</b></p>
<ul>
<li>Familiarity with Industrial Control Systems (DCS, PLC, SCADA) and third-party datalink protocols (e.g. Modbus, DNP3, ABPLC, OPC UA, MQTT)</li>
<li>Strong Microsoft/Cisco system administration experience.</li>
<li>Network Certifications</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Education Requirements</b></h2>
</div><div><p>
Required degree (Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education): Bachelor</p>
<p>
Preferred Discipline(s): Computer Science, Electrical Engineering, Information Systems</p>
<p>
Other disciplines may be substituted for the preferred discipline(s) listed above.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Licenses, Certifications, or Quals Description</b></h2>
</div><div><ul><li>ISC2 Certification - CISSP preferred, SSCP preferred, ISSAP, ISSEP</li>
<li>Linux Certifications &ndash; RHCSA, RHCE, RHCA, LPIC-1, LPIC-2</li>
<li>Firewall Certifications &ndash; Fortinet NSE4, 5, 6, 7, 8, PCCET, PCNSA, PCNSE</li>
<li>Network Certifications - CCNA, CCNP, CCIE, RHCSA, RHCE, RHCA</li>
<li>Security Certifications - OSCP, eCPPT, CISSP, SSCP</li>
<li>GIAC Certifications &ndash; GICSP, GRID, GCIP, GCIH, GCIA, GCFE, GPEN, GSEC, GCFA, GREM</li>
<li>Comptia Certifications CySA+, CASP+/SecurityX, Network+, Security+</li>
<li>Valid driver's license</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Working Conditions</b></h2>
</div><div><div>Office Work Environment 76 -100%</div><div>
Cold Up to 25%</div><div>
Dust / Grease / Oil Up to 25%</div><div>
Heat Up to 25%</div><div>
Loud Noise Up to 25%</div><div>
Operating Machinery Up to 25%</div><div>
Travel 51-75%</div></div></div><div><div><h2 class="jobSectionHeader"><b>
Other Working Conditions</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Test Description</b></h2>
</div><div><p>
No testing required.</p></div></div></div><br>
<p></p>
<p><b>Export Control</b></p><br>
<p><br>
Certain positions at Dominion Energy may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in Dominion Energy limiting its consideration of certain applicants.</p><br>
<p></p>
<p><b>Other Information</b></p><br>
<p><br>
We offer excellent plans and programs for employees. Employees are rewarded with a competitive salary and comprehensive benefits package which may include: health benefits with coverage for families and domestic partners, vacation, retirement plans, paid holidays, tuition reimbursement, and much more. To learn more about our benefits, click here dombenefits.com.</p>
<p>Dominion Energy is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin and/or status as a protected veteran or individual with a disability.</p>
<p>You can experience the excitement of our company &ndash; it's the difference between taking a job and starting a career.</p></div>

Generation Cyber Security Analyst / Generation Cyber Security Sr Analyst

IPSECURE, INC.

<div><div><b>Cyber Defense Operator (CDO</b><b>) - TS/SCI Level Clearance Required - Located in San Antonio, Texas</b></div>
<div></div><div><div><b>Job Description</b></div>
<div>The ability of the Cyber Defense Operator (CDO) is to complete its mission dependent upon accurate, timely and thorough event analysis in order to identify intruder or potential intruder activities utilizing host and network monitoring and system logs. The CDO shall correlate information gathered to provide effective methods to protect Air Force (AF) systems. Upon identification of suspicious activity on AF networks, open network intrusion investigation(s) to validate the unauthorized activity and determine the type and extent of activity.</div>
<div></div><div><b>Responsibilities</b></div>
<ul><li>When CAT events are escalated to incident response, complete incident response process, including: preparation, identification and scoping, containment, eradication and remediation, recovery, and lessons learned.</li>
<li>Upon identification of suspicious activity on AF networks, open network intrusion investigation(s) to validate the unauthorized activity and determine the type and extent of activity.</li>
<li>Provide AF Office of Special Investigations (OSI) DCO technical support to law enforcement and counter‐intelligence agencies and activities if required.</li>
<li>Participate and contribute to lessons learned meetings and briefings.</li>
<li>Support planned and same‐day Incident Response deployments.</li>
<li>Comply with 3rd party MOU/MOA monitoring and reporting requirements. Analyze host DCO events to determine the necessity for higher level analysis and conduct an initial assessment of type and extent of intruder activities.</li>
<li>Conduct cyber investigations in order to determine the initial vector and overall timeline of intrusion, accurately identify the threat, determine the full scope of impact, and develop containment and remediation actions for approval.</li>
<li>Author and review incident report forms (IRF) for security incidents within JEMS. Ensure the document is accurate and provides the correct amount of technical detail needed. (CDRL A008)</li>
<li>Provide AF Office of Special Investigations (OSI) DCO technical support to law enforcement and counter‐intelligence agencies and activities if required.</li>
<li>Generate end of mission reports (MISREPS) and provide pass‐on information for knowledge transfer to subsequent /crews of analysts on duty regarding the latest suspicious traffic seen from a given port, Internet Protocol (IP), etc. with no more than a 5% error rate.</li>
<li>Generate end of mission reports (MISREPS) and provide pass‐on information for knowledge transfer to subsequent /crews of analysts on duty regarding the latest suspicious traffic seen from a given port, Internet Protocol (IP), etc.</li>
<li>Provide computer security‐related support to AF field units as directed by CCC, in countering vulnerabilities, minimizing risk, and improving the security posture of AF computers networks and systems within the scope of AFIN SOC operational requirements and mission execution.</li>
<li>Participate in planning, briefing, and debriefing tasks as directed by CDO Mission Lead or Crew Commander.</li>
<li>Provide feedback on detection mechanisms that are both true and false positive events to ESM and Content Development as applicable.</li>
<li>Design incident response plans (IRP) as directed by the Crew Commander. Ensure CDOs are briefed on objectives, ROEs, plans, contingencies, and applicable TTPs.</li>
<li>Accomplish assigned weapon system access, ORM, Go/No Go, reports, TTP updates, and TAR submissions.</li>
</ul><div><b>Basic Qualifications</b></div>
<ul><li>Active TS/SCI Level Clearance.</li>
<li>Active CompTIA Security+ certification</li>
<li>Ability to gain the CSSP Incident Responder Certification (GCFA) Certification requirement within 120-days of hire date.</li>
</ul><div><b>Preferred Qualifications</b></div>
<ul><li>3+ years of relevant technical, cyber security, and business work experience</li>
</ul><div><b>Benefits</b></div>
<div>Medical, Dental, Vision, Unlimited Vacation, Sick Leave, Paid Federal Holidays, Education and Certification Reimbursement Program, 401(k) retirement plan with safe harbor employer match after 3 months, Prepaid legal plan and ID protection plan available, Accident Insurance, Critical Illness Insurance, and Hospital Indemnity Insurance available.</div>
<div></div><div><b>EEOC Statement</b></div>
<div>IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability or status as a protected veteran.</div></div></div>

Cyber Defense Operator (CDO)

Avion Solutions, Inc.

<div><p>Avion Solutions Inc., an employee-owned company, is seeking candidates for a <b>Cybersecurity Analyst</b> to support <b>PEO Aviation Headquarters. </b>This position is located in Huntsville, AL.</p><p></p><p><b>
Job Responsibilities/Duties:</b></p><ul><li><p>
Oversee and execute comprehensive audits and compliance checks to ensure all network and system infrastructure adheres to United States Department of Defense (DoD) and United States Army regulations.</p></li><li><p>
Conduct in-depth risk analyses, security assessments, and compliance validations for enterprise security strategies.</p></li><li><p>
Maintain accurate compliance documentation and manage records within the Enterprise Mission Assurance Support Service (eMASS) platform.</p></li><li><p>
Support the development, enhancement, and implementation of organizational cybersecurity policies, standards, and best practices.</p></li><li><p>
Determine data sensitivity levels and perform vulnerability scans in accordance with established classification guidelines and data flows.</p></li><li><p>
Continuously monitor security tools (e.g., SIEM, EDR) to detect and investigate suspicious activity.</p></li><li><p>
Analyze network traffic and system logs to identify anomalies and potential security breaches.</p></li><li><p>
Lead initial incident response efforts, from triage and investigation through containment and remediation.</p></li><li><p>
Participate in post-incident reviews to identify lessons learned and strengthen defensive strategies.</p></li><li><p>
Leverage cyber threat intelligence feeds to proactively identify and mitigate emerging threats.</p></li><li><p>
Other duties as assigned.
</p></li></ul><p></p><p><b>Required Experience:</b></p><ul><li><p>
Bachelor&rsquo;s degree with 5+ years of cybersecurity experience supporting DoD programs.</p></li><li><p>
Full compliance with DoDI 8140 certification requirements.</p></li><li><p>
Must be a U.S. citizen and have an active DoD Secret Security Clearance.</p></li><li><p>
Must be able to travel up to 25% of the time. US travel only.</p></li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li><p>
Advanced industry certifications (e.g., CISSP, CEH).</p></li><li><p>
Experience administering Windows Server environments.</p></li><li><p>
Working knowledge of Cisco router and switch configuration.</p></li><li><p>
Background in software assurance and secure development lifecycle (SDLC) practices.</p></li><li><p>
Hands-on experience with cybersecurity frameworks and tools, including Zero Trust architectures, SIEM platforms, vulnerability scanners, and network analysis tools.</p></li><li><p>
Strong analytical and problem-solving skills with exceptional attention to detail.</p></li><li><p>
Ability to interpret and apply cybersecurity directives from DoD and Army sources.</p></li><li><p>
Excellent written and verbal communication skills, including the ability to explain complex technical concepts to diverse audiences.</p></li><li><p>
Solid understanding of networking fundamentals, including architecture, protocols, and security principles.</p></li><li><p>
Proactive, inquisitive mindset with a commitment to continuous professional growth.Strong written and oral communication skills.</p></li></ul><p></p><p><b><br>
Equal Opportunity:</b> <b>Avion Solutions, Inc. reaffirms its belief in equal employment opportunity for all employees and applicants. Avion Solutions, Inc. is an Equal Employment Opportunity Employer and a VEVRAA-governed Federal Contractor that affords equal employment opportunity to protected veterans and people with disabilities. Avion Solutions, Inc. provides all employees and job applicants equal employment opportunities in hiring and promotion without regard to age, sex, sexual orientation, marital status, race, religion, color, veteran status, genetic information, physical or mental disability, national origin, or any other reason prohibited by law.</b></p></div>

Search 4729+ Cyber defense analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

4729 cyber defense analyst jobs Near Me

SOC IMR Analyst

Cybersecurity Analyst

Red Cell Cyber Analyst

Defensive Cyber Operations - Space Analyst

Generation Cyber Security Analyst / Generation Cyber Security Sr Analyst

Cyber Defense Operator (CDO)

Cybersecurity Analyst