defense analyst

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Junior Cyber Defense Operations Analyst to join our Threat Detection &amp; Response team as a frontline defender. You will monitor, triage, and investigate security alerts across SIEM, EDR, and XDR platforms, perform initial incident analysis, escalate confirmed threats, and maintain shift-based coverage for our managed services clients and on-site engagements. You will also leverage AI-augmented tooling and agentic SOC capabilities that Cyber Force is actively building into its detection and response workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Monitor security alerts from SIEM (Elastic SIEM, Microsoft Sentinel), EDR/XDR (Defender XDR) across client environments</li>
<li>Triage and investigate alerts: analyze log data, correlate events, identify IOCs, determine true vs. false positives</li>
<li>Perform initial incident response: collect artifacts, preserve evidence, escalate to Tier 2/3 with structured handoff</li>
<li>Execute detection playbooks aligned with MITRE ATT&amp;CK</li>
<li>Analyze network traffic, endpoint telemetry, and identity/authentication logs</li>
<li>Maintain shift logs, case notes, and client-facing incident reports to SLA standards</li>
<li>Contribute to detection engineering: propose rule improvements, tune thresholds</li>
<li>Leverage AI-augmented tooling and LLM-based tools (Claude, ChatGPT) for alert enrichment and report drafting</li>
<li>Validate AI-generated investigation outputs from agentic SOC capabilities</li>
<li>Participate in purple team exercises and continuous training</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>0&ndash;1 year experience in SOC, cyber defense, or IT security (internships, labs, CTFs count)</li>
<li>At least one cert: CompTIA Security+, CySA+, BTL1, ISACA CCOA, or equivalent</li>
<li>Fluent English (written and spoken)</li>
<li>Foundational knowledge of SIEM, EDR/XDR, and log analysis</li>
<li>Networking fundamentals: TCP/IP, DNS, HTTP/S, firewalls, proxies, VPNs</li>
<li>Familiarity with MITRE ATT&amp;CK and common adversary TTPs</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Willingness to work rotating shifts (24/7 coverage) and deploy to client sites</li>
<li>Elastic, Microsoft Sentinel, or Defender XDR experience &mdash; a strong plus</li>
<li>VICI VCDA (Viridian Certified Defense Associate) certification &mdash; a plus</li>
<li>French language skills &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior Cyber Defense Operations Analyst

Analytic Services Inc

<div><div>Company Overview: 
 
ANSER enhances national and homeland security by strengthening public institutions. We provide thought leadership for complex issues through independent analysis, and we deliver practical, useful solutions. ANSER values collaboration, integrity, and initiative and we are client focused in all that we do. Because we were established for the purpose of public service and not for profit, we measure our success in the impact of our service.</div>
Position Summary

ANSER is seeking an experienced Countering Weapons of Mass Destruction (CWMD) Analyst to support the Air Force Deputy Chief of Staff for Strategic Deterrence and Nuclear Integration (AF/A10). In this role, you will provide expert technical and analytical support for the development and implementation of CWMD and biodefense policy and strategy across the Department of the Air Force (DAF). You will contribute to operational analysis, policy development, and integration of CWMD considerations into Air Force missions, planning, and acquisition efforts.

This position is full-time onsite within the National Capital Region, including the Pentagon and Joint Base Anacostia-Bolling in Washington, DC.

Day to Day Responsibilities
<ul>
<li>Provide subject matter expertise and technical analysis on CWMD operations, including non-proliferation, targeting, interdiction, strike operations, Ability to Survive and Operate (ATSO), and Chemical, Biological, Radiological, and Nuclear (CBRN) defense.</li>
<li>Support the development, management, and implementation of the DAF's CWMD strategy, implementation guidance, concepts of operations (CONOPs), and contingency plans (CONPLANs).</li>
<li>Conduct technical research and operational evaluations to assess scientific testing results and determine impacts on Air Force personnel, including pilots, aircrew, maintainers, and defenders.</li>
<li>Characterize and assess threat agents, delivery mechanisms, and release environments for CBRN weapons, including their effects on airbase environments, equipment, and infrastructure.</li>
<li>Monitor advancements in scientific understanding of CBRN hazards and recommend updates to hazard duration models and risk management tools.</li>
<li>Conduct technical reviews of Joint Operational Requirements Documents to ensure CWMD and CBRN defense acquisition programs align with Air Force Key Performance Parameters (KPPs).</li>
<li>Integrate CWMD considerations into combatant command and service-level wargames, exercises, and training activities.</li>
<li>Collaborate with DoD and external organizations, including the Joint Staff, Military Services, and Major Commands (MAJCOMs), to support CWMD research, testing, training, and education initiatives.</li>
</ul>
Required Qualifications
<ul>
<li>Active Top Secret (TS) security clearance with eligibility for Sensitive Compartmented Information (SCI).</li>
<li>Bachelor's degree in engineering, scientific, technical, management, or a related field such as international relations or national security studies.</li>
<li>Minimum of 6 years of relevant CWMD experience.</li>
<li>Experience conducting scientific analysis of CBRN weapons and materials, including their properties, hazards, and effects on military systems and personnel.</li>
<li>Experience performing operational analysis on the impact of CBRN weapons on Air Force core missions, particularly aircraft generation and air mobility operations.</li>
<li>Experience supporting senior-level staff organizations, including Service Headquarters, Joint Staff, or Office of the Secretary of Defense.</li>
<li>Strong understanding of Air Force core missions and their integration with MAJCOM mission sets and combatant command operations.</li>
<li>Demonstrated experience managing complex projects with multiple stakeholders and minimal supervision.</li>
<li>Strong analytical, critical thinking, and problem-solving skills, with the ability to work effectively in a team environment.</li>
<li>Experience developing executive-level briefings and drafting informational, point, white, and decision papers.</li>
<li>Ability to travel domestically and internationally as required.</li>
</ul>
Preferred Qualifications
<ul>
<li>Master's degree in a related discipline.</li></ul><div> 

In compliance with the Americans with Disabilities Act (ADA), if you have a disability and would like to request an accommodation in order to apply for a position with ANSER, please call 703-416-2000 or e-mail Recruiting@anser.org

ANSER is proud to be an Equal Opportunity Employer. We seek individuals from a broad variety of backgrounds with varying levels of experience who have a desire to do meaningful work. We recruit, employ, train, compensate, and promote regardless of race, color, gender, religion, national origin, ancestry, disability, age, veteran status, sexual orientation, or any other characteristic protected by law.</div></div>

Countering Weapons of Mass Destruction (CWMD) Analyst

Core One

<div>Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most complex national security challenges. In order to achieve our mission, Core One values people first! We are committed to recruiting, nurturing, and retaining top talent! We offer a competitive total compensation package that sets us apart from our competition. Core One is a team-oriented, dynamic, and growing company that values exceptional performance!

We are seeking experienced Assessment Analyst to support Theater Security Cooperation (TSC) planning, analysis, and reporting efforts in support of USCENTCOM and higher headquarters. This role requires strong analytical expertise, operational planning experiencse, and the ability to contribute to complex, multi-level defense assessments in a dynamic operational environment.
<h2 class="jobSectionHeader">
Responsibilities</h2>
<ul><li>Support the collection, analysis, and reporting of periodic assessments for USCENTCOM and higher headquarters.</li>
<li>Develop and present assessment findings to senior leaders and key stakeholder forums.</li>
<li>Contribute to readiness reporting, campaign assessments, and strategic evaluation efforts.</li>
<li>Serve as a lead or supporting analyst for selected campaign plan assessments and related activities.</li>
<li>Coordinate with internal staff and external partners to consolidate data and produce integrated assessment products.</li>
<li>Participate in planning efforts, working groups, and operational planning teams supporting Security Cooperation initiatives.</li>
<li>Assist in the planning and execution of major Security Cooperation events and engagements.</li>
<li>Provide analytical and subject matter expertise to support Security Cooperation planning, strategy development, and decision-making.</li>
<li>Support the use and implementation of assessment tools and systems, including participation in working groups and process improvements.</li>
<li>Provide flexible, responsive support to emerging requirements and evolving mission priorities.</li>
</ul><h2 class="jobSectionHeader">Qualifications</h2>
<ul><li>Active TS/SCI clearance.</li>
<li>Bachelor's degree from an accredited college or university (or equivalent experience).</li>
<li>Minimum 10 years of relevant experience in defense analysis, planning, or related functional areas.</li>
<li>Demonstrated knowledge of DoD missions, organizations, and processes.</li>
<li>Experience working as a senior-level contributor on multidisciplinary teams.</li>
<li>Proven ability to collect, analyze, and present complex data in support of operational and strategic assessments.</li>
<li>Strong written and verbal communication skills, including experience briefing senior leadership.</li>
</ul><h2 class="jobSectionHeader">Desired Qualifications</h2>
<ul><li>Certification in Security Cooperation Planning, Oversight, and Execution Management (Basic or Intermediate).</li>
<li>Prior experience supporting Combatant Command (CCMD) or USCENTCOM operations.</li>
<li>Familiarity with DRRS, CCP, and joint planning and assessment processes.</li>
<li>Experience supporting interagency coordination and multinational engagements.</li>
<li>Knowledge of Security Cooperation planning, programming, and assessment systems (e.g., Socium).</li>
</ul>
Core One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</div>

Assessments Analyst

NMC Health plc

<div>Actively monitor the networks, systems, applications, IT assets and bio-medical equipment&rsquo;s for suspicious activity and threats. Using offensive and defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or may occur within the network and make the initial decision on the event/ threat severity.</div>
 <div><ul><li>Manage network, intrusion detection and prevention systems.
</li><li>Conduct periodic compromise assessments across selected networks and propose recommendations based on assessment results.
</li><li>Conduct physical security assessment of the organization&rsquo;s systems, including servers and networks, ensuring that any unauthorized external physical interference is not actually possible.
</li><li>Conduct ongoing network hunt activities.
</li><li>Conduct proactive vulnerability assessment across the network, subnetworks and service traffic to identify potential points of intrusion.
</li><li>Research and develop methods of tracking and detecting malicious activity within a network.
</li><li>Develop tools, signatures, and methods of detection for use in incident response activities.
</li><li>Develop SIEM integrations, dashboards, and analytics to illuminate and visualize threat activity.
</li><li>Analyze network traffic to provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
</li><li>Uses data collected from a variety of cyber defense tools (e.g., anti-virus, IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments, perform cyber defense trend analysis and reporting, and perform event correlation to mitigate threats and gain situational awareness and determine the effectiveness of an observed attack.
</li><li>Carries out triage to ensure that a genuine security incident is occurring.
</li><li>Coordinate with entity-wide cyber defense staff to validate network alerts.
</li><li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event&rsquo;s history, status, and potential impact for further action in accordance with the organization&rsquo;s cyber incident response plan.
</li><li>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
</li><li>Provide daily summary reports of network events and activity relevant to cyber defense practices.
</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
</li><li>Isolate and remove malware.
</li><li>Develop content for cyber defense tools use them for continual monitoring and analysis of network activity to identify malicious activity.
</li><li>Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within the network environment.
</li><li>Analyze and report organizational security posture trends.
</li><li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus, Threat Intelligence Providers) to maintain updated of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
</li><li>Provides cybersecurity recommendations based on significant threats and vulnerabilities.
</li><li>Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operational Plans.
</li><li>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber incidents within the enterprise.
</li><li>Use specialized equipment and techniques to catalog, document, extract, collect, package, and preserve digital evidence.
</li></ul>Utilize deployable forensics toolkit to support operations as necessary</div>
 <div>Knowledge
<ul><li>Security concepts such as cyber-attacks and techniques, threat vectors, risk and threat management, incident management etc.
</li><li>Networking concepts and protocols, and network security attacks, vulnerabilities, processes, methodologies, access control mechanisms, traffic analysis methods.
</li><li>Cyber threats and vulnerabilities and information dissemination sources (e.g., alerts and advisories).
</li><li>Cyber defense and vulnerability assessment tools and their capabilities.
</li><li>System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
</li><li>Scripting languages (e.g., Python, Perl, Bash) used in an incident response environment
</li><li>Incident response and handling methodologies.
</li><li>Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools, applications, methodologies and techniques for detecting host and network-based intrusions.
</li><li>Threat investigations, reporting and investigative tools.
</li><li>Cyber defense and information security policies, procedures, and regulations.
</li><li>Common attack vectors, the different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks) and attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
</li><li>Cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), and attackers&rsquo; methodologies.
</li><li>Signature implementation impact for viruses, malware, and attacks.
</li><li>Windows/Unix ports and services.
</li><li>Relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
</li><li>Packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
</li><li>Use of sub-netting tools.
</li><li>Penetration testing principles, tools, and techniques.
</li><li>Investigation, auditing and forensics methods, processes, procedures and standards.
</li><li>Different types of hardware, storage, imaging and file system analysis.
</li><li>Data backup and recovery.
</li></ul>Skills
<ul><li>Using SIEM/SOAR and Vulnerability Management tools and services.
</li><li>Sysadmin skills (Linux/Mac/Windows).
</li><li>Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more).
</li><li>Identifying, analyzing and interpreting trends or patterns in complex data sets.
</li><li>Developing and deploying signatures.
</li><li>Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
</li><li>Using incident handling methodologies.
</li><li>Collecting data from a variety of cyber defense resources.
</li><li>Recognizing and categorizing types of vulnerabilities and associated attacks.
</li><li>Performing packet-level analysis.
</li><li>Conducting trend analysis.
</li><li>Using cyber defense reporting structure and processes.
</li><li>Utilizing a combination of automated and manual testing methods.
</li><li>Developing automated vulnerability testing scripts and using off the shelf vulnerability testing tools.
</li><li>Conducting vulnerability scans and recognizing vulnerabilities in networks, systems and applications.
</li><li>Using of penetration testing tools and techniques.
</li><li>Applying analytical and problem-solving skills.
</li></ul>Ability
<ul><li>Collaborate with other sections across the department to enhance detection capabilities.
</li><li>Perform Malware analysis.
</li><li>Work closely with management to respond appropriately to the results of assessments and mitigation oversight of found vulnerabilities.
</li><li>Perform data analysis, correlation, and analytics leveraging Security Information and Event Management (SIEM) tools.
</li><li>Conduct vulnerability scans and recognize vulnerabilities in security systems &amp; devices.
</li><li>Accurately and completely source all data used in intelligence, assessment and/or planning products.
</li><li>Apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
</li><li>Interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
</li><li>Prepare and create regular reports to document any security breaches/ incidents.
</li><li>Provide forensic support to Cyber Security Operations during the investigation of any detected threat or contained incident / event to determine root cause and propose response recommendations as required.
</li></ul>Education and Certification
<ul><li>Bachelor&rsquo;s degree in an information technology, computer science, cyber security or equivalent work experience.
</li><li>CompTIA Security+
</li><li>CISSP: Certified Information Systems Security Professional
</li><li>GCFA: GIAC Certified Forensic Analyst
</li><li>GCIH: GIAC Certified Incident Handler
</li><li>GCIA: GIAC Certified Intrusion Analyst
</li><li>OSCP: Offensive Security Certified Professional
</li><li>CEH: Certified Ethical Hacker
</li><li>CPT: Certified Penetration Tester
</li></ul>Experience
<ul><li>3 years of experience in cyber security operations with expertise in managing the Security Operations Center
</li><li>UAE experience preferred.</li></ul></div>

Information Security Specialist

<div>Title:
Functional Area Analyst III (US)
Belong. Connect. Grow. with KBR!
KBR&rsquo;s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country&rsquo;s most critical role &ndash; protecting our national security.
Why Join Us?<ul><li>
Innovative Projects: KBR&rsquo;s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.</li><li>
Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.</li><li>
Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.</li></ul>
Key Responsibilities:
KBR seeks a Functional Area Analyst to support the CAPE Joint Data Support (JDS) Division. CAPE JDS is a multi-source funded and OSD CAPE managed organization responsible for identifying, collecting, developing, analyzing, managing, and disseminating historical, current, and future years U.S. and Non-U.S. forces inventory, capabilities, and deployment data (including planning, programming, and acquisition data) supporting collaborative study teams guided by the Analysis Working Group (AWG). JDS develops standardized data products and analytic tools to support Joint analytic efforts focused on Senior Leader decision support. Additionally, JDS supports AWG led SCI/SAP/SAR studies and analyses. 
The Functional Area Analyst, will be responsible for the support to the US Capability Data Acquisition Task. This task focuses on the collection of future force structure and capabilities data as well as current and historical operations data for U.S. Forces to assist DOW analysis in the proper employment and implementation of military concepts and capabilities. The contractor shall:
1. Provide data and U.S. military subject matter expertise weekly to extract, transform, load, and verify U.S. current and future force structure data in all domains and at multiple classification levels to include Air, Land, Sea, Space, Cyber and Special Operations. 
2. Develop, maintain, and enhance methodologies to capture, organize, maintain, and present current and historical operations databases to conduct and support yearly studies and analyses for Department-wide scenarios, strategic guidance, and national security strategies. 
3. Develop, maintain, and enhance multiple integrated databases containing current and future year military data to support priority analyses and provide a starting point for future force planning, capability studies and analysis. 
4. Develop, maintain, and evolve methodologies to capture, organize, maintain, and present databases on the capabilities and characteristics of U.S. systems and platforms. 
5. Collaborate with multiple DOW data sources and key stakeholders to acquire data and document data quality and constraints on the data received from sources and stakeholders. 
6. Submit quarterly data requests for access to DOW authoritative data sources and develop automated tools and processes to expedite data acquisition. 
7. Document the data review, analysis, and transformation process quarterly in accordance with study requirements. 
8. Identify and provide business rules associated with input methodologies, transformation requirements, limitations, and caveats to which the data should adhere when new products are developed; and then implement those rules and review/update on a quarterly basis. 
9. Assess quarterly and report all data discrepancies back to data sources and key stakeholders for resolution. 
10. Develop and maintain a systemic and repeatable transformation routine for all JDS data products and document/automate the transformations using advanced data tools and techniques when data products are developed. 
11. Create, transform, and tailor datasets to studies, analyses, models, simulations, and other analytic methods that capture enabling capabilities. 
12. Update data products quarterly and make new/updated products available to the users in various forms. 
13. Provide subject matter expertise on data development, forces, and capability readiness analysis to support studies and analyses and assist DOW analysts&rsquo; efforts to acquire data from key stakeholders. 
14. Provide analytic support and subject matter expertise to technical studies, analyses, or rapid assessments.
Required:<ul><li>
TS/SCI required to be considered for the position</li><li>
Bachelor&rsquo;s degree</li><li>
Eight (8) years of experience in at least one (1) of the following areas:</li><li><div>
Military or operations research-related field (e.g., U.S. current military operations, munitions, readiness, and deployment routines covering air/space, ground, special operations, and maritime domains). 
<ul><li>Planning, Programming, Budgeting, and Execution (PPBE).</li><li>Force / capability development.</li><li>Intelligence collection and analysis.</li></ul></div></li><li>
Eight (8) years of experience working with DOD stakeholders to collect, maintain, and refine complex datasets and will possess adeptness in interfacing with clients and expertise in Structured Query Language (SQL).</li></ul><ul><li>
Work Environment:</li><li>
Location: On-site, Pentagon and travel to Mark Center required</li><li>
Travel Requirements: Minimal 0-20%</li><li>
Working Hours: Standard</li></ul>
Scheduled Weekly Hours:
40hrs
Basic Compensation:
The offered rate will be based on the selected candidate&rsquo;s knowledge, skills, abilities and/or experience and in consideration of internal parity.
Additional Compensation:
KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.
Ready to Make a Difference?
If you&rsquo;re excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together.
KBR Benefits
KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision.
Belong, Connect and Grow at KBR 
 
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</div>

Functional Area Analyst III (US)

General Dynamics Information Technology

<div><div><div>Your Impact
Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.
Job Description<div><div>
SOC ANALYST 
 
Advance your career while impacting our national security in cyber as a SOC Analyst Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. 
 
WHAT YOU&rsquo;LL NEED TO SUCCEED 
Bring your cyber expertise and drive for innovation to GDIT. The SOC Analyst Principal must have: 
<ul><li>Education: Technical Training, Certification(s) or Degree</li><li>Experience: 4+ years of related experience</li></ul></div>
Required certs:
IAT II
CSSP Analyst
GMON
SCCU<div> 
GDIT IS YOUR PLACE 
At GDIT, the mission is our purpose, and our people are at the center of everything we do. 
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul> 
OWN YOUR OPPORTUNITY 
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div>
#VA_2026Alumni
#MD_2026Alumni
</div></div><div><div><div>Work Requirements</div></div><div></div><div><div>
Years of Experience<div>
8 + years of related experience</div><ul><li>may vary based on technical training, certification(s), or degree</li></ul></div><div></div><div>
Certification</div><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div>
Salary and Benefit Information<div>
The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. 
View information about benefits and our total rewards program.</div>
About Our Work<div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</div></div></div>

Cyber SOC Incident Detector (MIDS Shift) - TS/SCI with Polygraph

Tikal Group Doha

Job Opportunity: Cybersecurity AnalystLocation: Doha, Qatar Company: Tikal Group DohaAbout UsTikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled Cybersecurity Analyst to strengthen our security operations and safeguard our digital assets.Role OverviewThe Cybersecurity Analyst will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.Key Responsibilities<ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul>Why Join Us?<ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Cybersecurity Analyst

Search 2629+ Defense analyst jobs near you this May. New roles added regularly across leading industries. Apply today.