threat analyst

Cherokee Federal

<div><div><div><b>Cyber Threat Analyst (Intermediate)<br>
</b></div></div><div></div><div><div>This position requires an active<b>Public Trust</b>clearance or the ability to obtain a <b>Public </b><b>Trust</b>clearance to be considered.<br>
</div></div><div></div><div><div>Cherokee Nation System Solutions, LLC is seeking a knowledgeable <b>Security Analyst, Journeyman </b>to join our cybersecurity team and support the organization&rsquo;s efforts to protect data and networks from unauthorized access. The Security Analyst will provide technical expertise in information security standards, monitor network activity for potential threats, and perform in-depth security event analysis. This role requires advanced knowledge of network protocols, firewalls, disaster recovery operations, and security best practices. The ideal candidate will be proactive in identifying threats and solving complex technical issues to enhance the organization&rsquo;s overall security posture.<br>
</div></div><div></div><div><div><b>Compensation &amp; Benefits:
</b></div></div><div><div><div>Estimated Starting Salary Range for<b>Cyber Threat Analyst (Intermediate)</b>: $107K-$115K
</div></div><div><div>Pay commensurate with experience.
</div></div><div><div>Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.<br>
</div></div><div></div><div><div><b>Cyber Threat Analyst (Intermediate)</b><b>Responsibilities Include:
</b></div></div><div><div>Incident Detection &amp; Response
</div></div><div><ul><li><div>Monitor, analyze, and triage security alerts from multiple sources including SIEM, EDR/XDR, and network monitoring tools
</div></li></ul></div><div><ul><li><div>Perform in-depth investigations of security incidents, including malware, phishing, lateral movement, and data exfiltration
</div></li></ul></div><div><ul><li><div>Lead incident response activities and recommend containment, eradication, and recovery actions
</div></li></ul></div><div><ul><li><div>Create incident reports documenting incident timelines, root cause analysis, and remediation recommendations
</div></li></ul></div><div><div>Endpoint &amp; Network Security Analysis
</div></div><div><ul><li><div>Analyze endpoint telemetry to identify suspicious behavior, persistence mechanisms, and exploitation techniques
</div></li></ul></div><div><ul><li><div>Investigate network traffic (e.g., DNS, HTTP(S), NetFlow, PCAP) for indicators of compromise (IOCs) and attacker activity
</div></li></ul></div><div><ul><li><div>Correlate endpoint and network data to identify threats and attack patterns
</div></li></ul></div><div><div>Cloud Security (AWS &amp; Azure)
</div></div><div><ul><li><div>Monitor and investigate security events in AWS and Azure environments
</div></li></ul></div><div><ul><li><div>Analyze CloudTrail, VPC flow, Azure Activity, and Azure AD/Entra ID logs to identify suspicious cloud activity
</div></li></ul></div><div><ul><li><div>Support cloud incident response and recommend security improvements
</div></li></ul></div><div><div>EDR and SIEM Detection &amp; Analysis
</div></div><div><ul><li><div>Utilize Splunk for log analysis, correlation searches, and dashboard creation
</div></li></ul></div></div><div><div><ul><li><div>Leverage Microsoft Defender XDR and Trellix Endpoint Security (HX) for threat hunting, alert triage, and response actions
</div></li></ul></div><div><ul><li><div>Develop and tune detection rules to improve alert fidelity and reduce false positives
</div></li></ul></div><div><ul><li><div>Create and maintain runbooks and standard operating procedures (SOPs)
</div></li></ul></div><div><div>Threat Hunting &amp; Intelligence
</div></div><div><ul><li><div>Conduct proactive threat hunting across endpoint, network, and cloud environments
</div></li></ul></div><div><ul><li><div>Integrate and apply threat intelligence to enhance detection and response capabilities
</div></li></ul></div><div><ul><li><div>Identify gaps in visibility and recommend improvements
</div></li></ul></div><div><div>Collaboration &amp; Mentorship
</div></div><div><ul><li><div>Act as escalation point for Tier 1 analysts
</div></li></ul></div><div><ul><li><div>Provide guidance and training to junior analysts
</div></li></ul></div><div><ul><li><div>Collaborate with to facilitate incident response and improve security posture<br>
</div></li></ul></div><div></div><div><div><b>Cyber Threat Analyst (Intermediate)</b><b>Experience, Education, Skills, Abilities requested:
</b></div></div><div><ul><li><div><b>Bachelor&rsquo;s degree </b>in Cybersecurity, Information Technology, Computer Science, or a related field is preferred.
</div></li></ul></div><div><ul><li><div>Minimum <b>3-5 years of experience </b>in security analysis, with a strong understanding of network protocols, traffic analysis, endpoint forensics and artifacts.
</div></li></ul></div><div><ul><li><div>Strong experience with Splunk (SPL, dashboards, correlation rules)
</div></li></ul></div><div><ul><li><div>correlation)
</div></li></ul></div><div><ul><li><div>Experience analyzing:
</div></li></ul></div><div><ul><li><div>Endpoint telemetry (EDR tools, host-based investigations)
</div></li></ul></div><div><ul><li><div>Network traffic (packet analysis, NetFlow, IDS/IPS alerts)
</div></li></ul></div></div><div><div><ul><li><div>Cloud logs (AWS and Azure)
</div></li></ul></div><div><ul><li><div>Familiarity with AWS (e.g., CloudTrail, GuardDuty , VPC logs)
</div></li></ul></div><div><ul><li><div>Familiarity with Microsoft Azure (e.g., Azure AD/Entra ID, Defender for Cloud)
</div></li></ul></div><div><ul><li><div>Experience with Microsoft Defender XDR (endpoint, identity, email, and cloud)
</div></li></ul></div><div><ul><li><div>Solid understanding of:
</div></li></ul></div><div><ul><li><div>MITRE ATT&amp;CK framework
</div></li></ul></div><div><ul><li><div>Common attack Tactics, Techniques, and Procedures (TTPs)<br>
</div></li></ul></div><div></div><div><ul><li><div><b>Relevant certifications:
</b></div></li></ul></div><div><ul><li><div>GIAC Certified Incident Handler (GCIH)
</div></li></ul></div><div><ul><li><div>GIAC Certified Forensic Analyst (GCFA)
</div></li></ul></div><div><ul><li><div>GIAC Certified Forensic Analyst (GCFE)
</div></li></ul></div><div><ul><li><div>CompTIA CySA +
</div></li></ul></div><div><ul><li><div>Microsoft Certified: Security Operations Analyst Associate (SC-200)
</div></li></ul></div><div><ul><li><div>Splunk Core Certified Power User
</div></li></ul></div><div><ul><li><div>Splunk Certified Cybersecurity Defense Analyst
</div></li></ul></div><div><ul><li><div><b>Preferred Skills:
</b></div></li></ul></div><div><ul><li><div>Experience with <b>SIEM tools </b>and network monitoring systems.
</div></li></ul></div><div><ul><li><div>Strong analytical and problem-solving skills with the ability to respond to complex security incidents.
</div></li></ul></div><div><ul><li><div>Scripting or automation skills (Python, PowerShell, Bash)
</div></li></ul></div></div><div><div><ul><li><div>Experience with SOAR platforms and automated response workflows
</div></li></ul></div><div><ul><li><div>Knowledge of digital forensics and malware analysis (basic to intermediate)
</div></li></ul></div><div><ul><li><div>Excellent communication skills, with the ability to clearly explain security issues and recommendations to technical and non-technical stakeholders.
</div></li></ul></div><div><ul><li><div>Must pass pre-employment qualifications of Cherokee Federal<br>
</div></li></ul></div><div></div><div><div><b>Company Information:
</b></div></div><div><div><b>Cherokee Nation System Solutions (CNSS)</b>is a part of Cherokee Federal &ndash; the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and <b>serving </b>the government&rsquo;s mission with compassion and heart. To learn more about<b>CNSS</b>, visit cherokee-federal.com.<br>
</div></div><div></div><div><div><b>#CherokeeFederal #LI-SM2 #AppC<br>
</b></div></div><div></div><div><div>Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.
 </div></div><div><div><b>Keywords
</b></div></div><div><div><ul><li><div>Security Analyst
</div></li></ul></div></div><div><div><ul><li><div>Network Security
</div></li></ul></div></div><div><div><ul><li><div>Threat Detection
</div></li></ul></div></div><div><div><ul><li><div>SIEM Tools
</div></li></ul></div></div><div><div><ul><li><div>Incident Response
</div></li></ul><ul><li><div><b>Similar Job Titles
</b></div></li></ul></div></div></div><div><div><div><ul><li><div>Cybersecurity Analyst
</div></li></ul></div></div><div><div><ul><li><div>Network Security Analyst
</div></li></ul></div></div><div><div><ul><li><div>Information Security Specialist
</div></li></ul></div></div><div><div><ul><li><div>Threat Detection Specialist
</div></li></ul></div></div><div><div><ul><li><div>Incident Response Analyst<br>
</div></li></ul></div></div><div></div><div><div><b>Legal Disclaimer: </b>Cherokee Federal is an equal opportunity employer. Please visit cherokee-federal.com/careers for information regarding our Affirmative Action and Equal Opportunity Employer Statement, and Accommodation request.
</div></div><div><div>Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.</div></div></div></div>

Cyber Threat Analyst(Intermediate)

State of Utah

<div>
 <strong>
  FT / PT Status &ndash;
 </strong>
 Full-Time
 <strong>
  Salary &ndash;
 </strong>
 $35.00 - $35.00 Hourly Wage
 <strong>
  Remote Work / In-Office &ndash;
 </strong>
 Hybrid
 <strong>
  Recruiter &ndash;
 </strong>
 Laura Alexander | LAlexander@utah.gov | 801-903-3138
 <strong>
  Application Deadline &ndash;
 </strong>
 4/21/2026
 <br/>
 <br/>
 <strong>
  Cyber Threat Intelligence Analyst- SIAC
  <br/>
  <br/>
 </strong>
 Are you looking for a career in the information security and criminal justice field? The Utah Statewide Information &amp; Analysis Center (SIAC) is an amazing step on your career path. You'll be able to provide assistance to the citizens of Utah and make a difference in our communities.
 <br/>
 <br/>
 Serve as a Cyber Threat Intelligence Analyst with specialties in strategic intelligence production, technical analysis, cyber threat hunting, and/or cyber outreach coordination. Conduct research regarding threat groups and evaluate intelligence on criminal tactics, techniques, and procedures. Analyze events to determine the impact on current operations and conduct research to determine adversary capability and intent. This may include giving and producing intelligence briefings, training, presentations, and organizing collaborative groups and outreach programs. Conduct outreach to increase security awareness and notification of specific threats. Cyber Threat Intelligence Analysts perform entry level Information Security related duties in the areas of cybersecurity.
 <br/>
 <br/>
 <strong>
  As a Cyber Threat Intelligence Analyst, You Will
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Collect and document raw information for further analysis and evaluation.
  </li>
  <li>
   Assess and analyze cyber threats and vulnerabilities and disseminate intelligence reports to stakeholders.
  </li>
  <li>
   Assist law enforcement with network analysis and criminal investigations.
  </li>
  <li>
   Coordinate and participate in necessary outreach to law enforcement, public and private sector, and cybersecurity professionals.
  </li>
  <li>
   Perform statistical and intelligence analysis by applying analytical tradecraft and best practices in analyzing data and reaching accurate conclusions.
  </li>
  <li>
   Analyze, summarize and/or review data; report findings, interpret results and/or make recommendations.
  </li>
  <li>
   Write or draft raw and finished intelligence reports, articles or related material based on research, investigation or analysis.
  </li>
  <li>
   Form conclusions and develop recommendations for detection, deterrence, disruption and mitigation.
  </li>
  <li>
   Participate in community working groups or teams or other related assignments as needed/directed.
  </li>
  <li>
   Ensure the integrity and protection of networks, systems, and applications through cyber threat and network monitoring, performing on-demand vulnerability assessments, and investigations and reporting of incidents.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Ideal Candidate:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Demonstrated skill in intelligence analysis and critical thinking
  </li>
  <li>
   Demonstrated skill in social media research and analysis
  </li>
  <li>
   Working level experience in the use of databases for entering data, searching and exploiting information and the development of intelligence to inform decision makers,
  </li>
  <li>
   Working level skills in spreadsheets, statistics, and Microsoft Office Suite
  </li>
  <li>
   Working level analytic report writing and presentations skills
  </li>
  <li>
   Demonstrated experience in security operations (SIEMs), network monitoring, and vulnerability management platforms (Tenable, Nessus, etc.)
  </li>
  <li>
   Knowledge of malware analysis concepts, methods, and techniques
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preference May Be Given To Applicants Who Currently
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Have SECRET National Security Clearance and have experience with Intelligence Analysis, Targeting, Information Security
  </li>
  <li>
   Have experience working on task forces or similar environments
  </li>
  <li>
   Have industry-recognized cybersecurity-related certifications (GIAC, CompTIA, etc.)
  </li>
  <li>
   Are a DPS employee
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Additional Information
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   This position requires the successful candidate to be willing and available to travel both in state and out of state, including overnight stays when necessary.
  </li>
  <li>
   A level II background will be completed on candidates who accept a verbal, conditional offer.
  </li>
  <li>
   What does it mean to qualify to hold a security clearance? Please visit- https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-D/part-147
  </li>
  <li>
   Attend Subject Matter Expertise development training for this position.
  </li>
  <li>
   Completion of SECRET National Security Clearance submission packet (if clearance is not currently held by successful candidate).
  </li>
  <li>
   Only candidates selected for an interview will be contacted
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 <strong>
  Location
 </strong>
 &ndash;
 <br/>
 <br/>
 4501 S 2700 W, Po Box 148285
 <br/>
 <br/>
 Salt Lake City, Utah, 84114-8285
 <br/>
 <br/>
 United States
 <br/>
 <br/>
 <strong>
  Background Check Required
 </strong>
 &ndash; You must successfully pass a criminal history check.
 <br/>
 <br/>
 <strong>
  Drug Test Required
 </strong>
 &ndash; No
 <br/>
 <br/>
 <strong>
  Schedule Code
 </strong>
 &ndash; B - Competitive Career Service
 <br/>
 <br/>
 <strong>
  Why You Should Join Our Team
  <br/>
  <br/>
 </strong>
 <strong>
  Benefits
  <br/>
  <br/>
 </strong>
 In Utah, we believe hard work is important, but balance is essential. Finding work/life balance is a vital element to our culture. To find out more about WHY Utah , click here . Other benefits may include:
 <br/>
 <br/>
 <ul>
  <li>
   Job Stability: Enjoy the security and reliability of employment within a well-established organization.
  </li>
  <li>
   Career Growth: Develop valuable skills and gain opportunities for leadership within a large organization.
  </li>
  <li>
   Meaningful Work: Contribute to an important service that benefits the community and supports organizational goals.
  </li>
  <li>
   Supportive Work Environment: Be part of a team that values cooperation, strong work ethics, and mutual support.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  The Agency
 </strong>
 The Utah Department of Public Safety (DPS) is comprised of 12 divisions and bureaus that include the Utah Highway Patrol, the Division of Emergency Management, Driver License division, Statewide Information and Analysis Center (SIAC), State Bureau of Investigation (SBI), State Fire Marshal, Highway Safety Office, Communications, State Crime Lab, Bureau of Criminal Identification, and Peace Officers Standards and Training (POST). The DPS dive team, aero bureau, CERT team and Public Protection Unit (PPU) also fall under the Department of Public Safety. DPS is made up of more than 1,500 state employees who are stationed across Utah.
 <br/>
 <br/>
 The Department of Public Safety offers a unique and rewarding employment opportunity. More information about our agency can be found on www.dps.utah.gov.
 <br/>
 <br/>
 <strong>
  EEO Statement
 </strong>
 The State of Utah is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. For accommodations, please contact (801) 957-9390.
</div>


Cyber Threat Intelligence Analyst

Technology Ventures

<div>
 <p>
  We are seeking an Cyber Investigations Analyst to support Insider Threat detection, investigation, and response to activities focused on technical and behavioral insider risk. This role will conduct end-to-end investigations including triage, evidence collection, timeline development, and documentation aligned to investigation standards. The analyst will perform hypothesis-driven threat hunting and analysis using SIEM and enterprise telemetry, with a strong understanding of SOC operations, log analysis, and core networking concepts. (TCP/IP, DNS, HTTP/S) The role requires knowledge of insider threat categories such as IP theft, fraud, sabotage, espionage, and unintentional risk, including accidental disclosure. The analyst will identity behavioral indicators of risk, support cross-functional response workflows, and contribute to governed documentation, metrics, and reporting.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Ideal candidates will have experience working in SAC's. Cybersecurity background is a plus as well as investigative work. 3-5 years of experience. Expected to work in Reston 3 times a week.
 </p>
</div>


Cyber Security Analyst

Pinkerton

<div>Overview:
<p><b>
170+ Years Strong. Industry Leader. Global Impact.</b><br>
At Pinkerton, the mission is to protect our clients. To do this, we provide enterprise risk management services and programs specifically designed for each client. Pinkerton employees are one of our most important assets and critical to the delivery of world-class solutions. Bonded together, we share a commitment to integrity, vigilance, and excellence.</p><p></p><p><br>
Pinkerton is an inclusive employer who seeks candidates with diverse backgrounds, experiences, and perspectives to join our family of industry subject matter experts.</p><p></p><p><br>
The Investigations Analyst, assigned to one of Pinkerton&rsquo;s largest global clients, will investigate, interpret, and communicate information from a variety of sources to identify and assess risks to the client organization. The Analyst supports Global Security Investigations and Executive Threat Managers with critical tactical and strategic analysis to enhance threat investigations.
</p>Responsibilities:
<ul><li>Represent Pinkerton&rsquo;s core values of integrity, vigilance, and excellence.</li><li>
Complete investigative processes including analysis and reporting related but not limited to; life safety/threat management (workplace violence, assault, harassment, stalking, domestic violence, and missing personnel), asset protection, misconduct (alleged violations of certain client policies), and miscellaneous (trespassing, unauthorized access, and vandalism).</li><li>
Assist other team members on more in-depth investigations, as assigned by Investigators.</li><li>
Monitor all-source information to proactively identify and assess the likelihood and severity of threats.</li><li>
Monitor Persons of Interest (POIs) who may pose a threat of violence to high-value people or assets.</li><li>
Conduct open-source social media searches and utilize social media research, public record research, and third-party databases to build leads.</li><li>
Collaborate internally with cross functional groups such as legal, customer support, and engineering, to enhance processes, workflows, tools, and system functionality.</li><li>
Support the management of information, presentation of information, and production of graphics.</li><li>
Safeguard and maintain highly sensitive and confidential information.</li><li>
Produce metrics, as required for the Investigations team and key partners.</li><li>
All other duties, as assigned.</li></ul>
Qualifications:
<div>
Bachelor's degree preferred in a related field and/or formal corporate, government, military, or law enforcement investigation and threat assessment training or a combination of formal education and experience in government or corporate protective intelligence/threat assessment programs will be considered. The selected candidate will require licensing as a Private Investigator.</div><br>
<div></div><ul><li>
Knowledge of conventional investigative, crime, and intelligence analysis.</li><li>
Knowledge of internet crime investigation processes and use of related databases.</li><li>
Industry relevant certifications such as CTM, CPP, PCI, and/or PSP, preferred.</li><li>
Proficient computer investigation skills.</li><li>
Knowledge and use of databases, social media platforms, and heat/target mapping.</li><li>
Knowledge of source and proprietary applications.</li><li>
Able to interact effectively at all levels and across diverse cultures.</li><li>
Able to carry out responsibilities with little supervision.</li><li>
Effective written, verbal, and presentation skills.</li><li>
Able to manage multiple projects simultaneously with competing priorities and deadlines.</li><li>
Client orientated and results driven.</li><li>
Project management skills.</li><li>
Maintain a high level of professionalism and confidentiality.</li><li>
Computer skills; Microsoft office, SharePoint, and Power BI.</li></ul><div><b>
Working Conditions:</b></div><div>
With or without reasonable accommodation, requires the physical and mental capacity to effectively perform all essential functions;</div><ul><li>
Regular computer usage.</li><li>
Occasional reaching and lifting of small objects and operating office equipment.</li><li>
Frequent sitting.</li><li>
Travel, as required.</li></ul><div>
Pinkerton is an equal opportunity employer to all applicants and positions without regard to race/ethnicity, color, national origin, ancestry, sex/gender, gender identity/expression, sexual orientation, marital/prenatal status, pregnancy/childbirth or related conditions, religion, creed, age, disability, genetic information, veteran status, or any protected status by local, state, federal or country-specific law.</div>
Benefits:
<div>
Benefit options include employer-paid life and AD&amp;D, voluntary life and AD&amp;D, medical, (HSA) Health Savings Account, (FSA) Flexible Savings Account, dental, vision, short-term disability, long-term disability, 401(K), paid time off (vacation, personal, sick, and holidays) and several employee assistance-related programs. This information provides a brief benefit overview. Upon the acceptance of an employment offer, the new employee will receive comprehensive plan details based on specific eligibility rules.</div>
Posted Salary Range: USD $41.82 - USD $45.67 /Hr.</div>

Investigations Analyst

Weeghman & Briggs

<div><p><b>Intrusion Analyst 3</b></p><p><b>
Location:</b> Annapolis Junction, MD | Onsite <b>Clearance Required:</b> TS/SCI with Polygraph <b>Employment Type:</b> Full-Time <b>Salary Range:</b> $175,000&ndash;$185,000</p><p><b>
Join a Growing Team at WeeghmanBriggs</b></p><p>
WeeghmanBriggs is seeking a missiondriven <b>Intrusion Analyst 3</b> to support critical national security initiatives in Annapolis Junction, MD.</p><p>
Founded in 2016 by Anthony Jordan, WeeghmanBriggs specializes in delivering highimpact analytical and technical services to Government Agencies and private organizations. As we continue to expand across current programs and upcoming contract awards, we are looking for talented professionals who want to contribute, grow, and build something meaningful alongside us.</p><p>
At WeeghmanBriggs, you're more than a number-you're part of the team. Your voice is heard, your expertise matters, and your work directly supports mission success. Our growth creates opportunities for advancement, leadership visibility, and longterm career development while maintaining the closeknit, supportive culture that sets us apart.</p><p>
If you're ready to grow your career while supporting important national missions, we'd love to connect with you.</p><p><b>
About the Mission</b></p><p>
Your effort and expertise are crucial to the success of this impactful mission. You will support a diverse team of Data Scientists, Cryptologic Computer Scientists, Cryptanalytic Computer Scientists, Cryptologic Cyber Planners, Intrusion Analysts, Protocol Analysts, Signals Analysts, and Reverse Engineers-professionals dedicated to improving, protecting, and defending our Nation's Security.</p><p><b>
What You'll Do</b></p><ul><li>
Analyze target digital network data to identify, document, and report malicious or unauthorized activity using SIGINT and computer network defense resources.</li><li>
Examine metadata from tasked communications systems to identify, locate, and track targets.</li><li>
Categorize network traffic as benign, suspicious, or malicious, and document associated TTPs.</li><li>
Develop and implement mitigation strategies to protect mission systems.</li><li>
Apply a networkfocused and/or hostbased approach to intrusion analysis.</li><li>
Collaborate with crossfunctional teams to deliver highquality, missionrelevant results.</li><li>
Ensure compliance with contract and security standards.</li><li>
Contribute ideas to improve processes, efficiency, and analytical performance.</li></ul><p><b>
What You Bring</b></p><ul><li>
Active TS/SCI with FullScope Polygraph</li><li>
Master's degree with <b>6 years</b> of relevant experience</li><li>
Bachelor's degree with <b>8 years</b> of relevant experience</li><li>
Associate degree with <b>10 years</b> of relevant experience</li><li>
Bachelor's degree must be in <b>Computer Science, Computer Engineering, Information Systems, or a related discipline</b></li><li>
Relevant experience must include <b>malware analysis</b></li><li>
Programming experience in <b>C, C#, C++, Java, Perl, or Python</b> is preferred</li><li>
Strong written and verbal communication skills</li><li>
Ability to work independently and within a collaborative team environment</li><li>
Experience supporting government or DoD programs</li></ul><p><b>
Required Certifications</b></p><ul><li>
CISSP</li><li>
CEH</li><li>
Security+</li><li>
Network+</li><li>
GIAC GREM and/or CREA</li></ul><p><b>
Preferred Qualifications</b></p><ul><li>
Experience supporting specific DoD or Intelligence Community programs</li><li>
Background in cyber operations, intrusion analysis, or advanced threat detection</li><li>
Familiarity with Agile, cloud, or modernization initiatives</li><li>
Experience in process improvement or analytical services</li></ul><p><b>
CompensationBenefits</b></p><p>
The projected salary range for this position is <b>$175,000&ndash;$185,000</b>, dependent upon experience, qualifications, and contract requirements.</p><p>
WeeghmanBriggs offers a competitive benefits package designed to support you both professionally and personally.</p><p>
Learn more about our comprehensive benefits: Summary of Benefits (weeghmanandbriggs.com in Bing)</p><p><b>
Equal Employment Opportunity</b></p><p>
WeeghmanBriggs is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other protected characteristic.</p></div>

Intrusion Analyst Level 3

Alykas

<p><b>SOC Analyst &ndash; Alykas</b></p><p><b>About Alykas</b></p><p>Alykas is a US-based company providing intelligent, end-to-end IT and cybersecurity solutions designed for mid-market and enterprise organizations. Our mission is to deliver measurable outcomes that reduce risk, enhance operational efficiency, and turn technology into a strategic competitive advantage.</p><p>We offer a comprehensive portfolio of services, including <b>Managed IT Services, Cloud &amp; Data Center Solutions, IT Advisory &amp; Consulting, and Cybersecurity Solutions</b>. Our team of globally experienced, culturally aligned engineers provides consistent, expert support tailored to meet the complex needs of today&rsquo;s dynamic business environments.</p><p><b>Position Overview</b></p><p>As a <b>SOC Analyst</b> at <b>Alykas</b>, you will play a critical role in safeguarding our clients against evolving cyber threats through advanced security monitoring, analysis, and incident response. Working within a multi-tenant <b>Security Operations Center (SOC)</b>, you will support multiple clients using a range of cutting-edge cybersecurity technologies including <b>SIEM, EDR, MFA</b>, and more.</p><p>Your responsibilities will span <b>threat detection, incident triage, and proactive threat hunting</b>, as well as utilizing tools such as <b>PAM, email security, firewalls, and IAM systems</b> to enhance client security postures. Strong communication and collaboration skills are essential, as you&rsquo;ll regularly engage with clients and internal teams to ensure swift, effective responses to security challenges.</p><p><b>Key Responsibilities</b></p><ul><li>Monitor and analyze security alerts using SIEM platforms</li><li>Conduct initial triage, assess incident severity, and take appropriate response actions</li><li>Investigate indicators of compromise (IOCs) and document findings comprehensively</li><li>Respond to incidents following established playbooks and escalation procedures</li><li>Collaborate with cross-functional teams to resolve security incidents efficiently</li><li>Maintain accurate documentation of investigations, incidents, and remediation activities</li><li>Stay current with emerging cyber threats, technologies, and defensive strategies</li></ul><p><b>Must-Haves</b></p><ul><li>Minimum <b>3 years of experience</b> in a <b>Security Operations Center (SOC)</b></li><li>Proficiency with <b>endpoint detection tools</b> (e.g., SentinelOne, CrowdStrike, Microsoft Defender)</li><li>Hands-on experience with <b>incident response</b> and <b>ticketing systems</b></li><li>Strong <b>client-facing communication</b> and <b>reporting</b> skills</li><li>Familiarity with <b>firewall technologies</b></li><li><b>Fluent English communication skills</b>, both written and verbal essential for working with Alykas&rsquo;s international clients</li></ul><p><b>Experience With</b></p><ul><li><b>SIEM platforms</b> such as QRadar, Splunk, or AlienVault</li></ul><p><b>Nice-to-Haves (Plusses)</b></p><ul><li>Experience with <b>automation platforms (SOAR)</b> and <b>scripting</b> (e.g., Python)</li><li>Exposure to <b>Vulnerability Management</b> and <b>SCCM</b></li><li>Background in <b>Cyber Threat Hunting (CTH)</b> or <b>Cyber Threat Intelligence (CTI)</b></li><li>Relevant certifications such as <b>Security+, CySA+, CISSP, or CEH</b></li><li>Knowledge of <b>Identity and Access Management (IAM)</b>, particularly <b>Active Directory</b></li></ul><p><b>Benefits</b></p><ul><li><b>Competitive salary</b> based on experience</li><li><b>Performance-based bonus program</b></li><li><b>Comprehensive benefits package</b>, including health insurance and paid time off</li><li><b>Collaborative work environment</b> at world-class, state-of-the-art service delivery centers</li><li><b>Company-sponsored certifications</b> and ongoing professional development opportunities</li><li><b>Unlimited lab access</b> for hands-on learning and technical skill enhancement</li></ul><p><b>Join the Alykas Mission</b></p><p>At Alykas, we are driven by a shared mission &mdash; to defend digital assets, empower secure business operations, and deliver excellence in every interaction. If you&rsquo;re passionate about cybersecurity and eager to grow in a collaborative, globally engaged environment.</p><p><b>Apply today</b> and take the next step in your cybersecurity career with Alykas.</p><p>Job Type: Full-time</p><p>Pay: Rs120,000.00 - Rs170,000.00 per month</p><p>Language:</p><ul><li>English (Preferred)</li></ul><p>Work Location: In person</p>

SOC Analyst

Tyto Athene

<div>Description:
<div>
Tyto Athene is searching for a <b>DCO Analyst</b> to support a DoD customer in Adelphi, Maryland.</div><div></div><div><b><br>
Responsibilities:</b></div><ul><li>
The DCO Team Analyst performs Security Analysis functions supporting 24/7/365 CSSP operations. Analysts monitor, detect, analyze, and respond to cyber threats targeting the DoD Information Network (DoDIN), utilizing signature detection, anomaly detection, and data visualization methods to discover, document, and report malicious and anomalous activity.</li><li>
Analyze results of signature detection, anomaly detection, and data visualization-based methods of discovering, documenting, and reporting malicious and anomalous activity as defined by DoD standards.</li><li>
Develop, implement, and maintain methods of detecting malicious and anomalous activity utilizing COTS, GOTS, and open-source tools.</li><li>
Analyze Government Furnished Data (GFD) to discover and document reconnaissance efforts, exploitation attempts, post-exploitation events, and actions on objectives.</li><li>
Track incident and event reporting to ensure fully effective mitigation and remediation actions.</li><li>
Utilize the MITRE ATT&amp;CK Framework to develop, implement, and maintain threat models containing TTPs associated with threats to the DoDIN.</li><li>
Monitor DCSB and subscriber environments for technical indicators of insider threat activity.</li><li>
Support monthly recurrent briefings providing summative reports of vulnerability data, compliance data, threat data, incident reporting data, and alerting data.</li><li>
Conduct cyber attack response and recovery in accordance with DoD and Government instructions.</li><li>
Perform continuous monitoring of network traffic on NIPRNet, SIPRNet, DREN, and cloud environments.</li><li>
Develop and maintain detection signatures, rules, and alerts for security monitoring platforms.</li><li>
Coordinate with external threat intelligence sources and DoD cyber defense organizations.</li><li>
Document findings, analysis results, and recommended actions in accordance with CSSP reporting requirements.</li><li>
Support vulnerability scanning operations using ACAS/Tenable and endpoint security solutions (ESS/HBSS).</li><li>
Participate in incident response activities and forensic analysis as required.</li></ul><div>
</div>
Qualifications:
<div><b>
Required:</b></div><ul><li>
An AA or Bachelor&rsquo;s Degree in a related technical field is required, however, can be replaced with 3 years of relevant industry experience (in addition to the minimum years of experience requirement).</li><li>
Minimum three (3) years of experience in cybersecurity analysis, threat detection, or related field.</li><li>
Experience with intrusion detection systems (IDS/IPS) and Security Information and Event Management (SIEM) platforms (e.g., Elasticsearch, Splunk).</li><li>
Knowledge of common attack vectors, malware analysis, and threat intelligence methodologies.</li><li>
Proficiency with vulnerability scanning tools (ACAS/Tenable) and endpoint security solutions (ESS/HBSS).</li><li>
Experience analyzing network traffic and security events on classified and unclassified networks.</li><li>
Familiarity with the MITRE ATT&amp;CK Framework and cyber threat intelligence practices.</li><li>
Knowledge of TCP/IP protocols, network architecture, and common network services.</li><li>
Experience with log analysis, packet capture analysis, and security event correlation.</li><li>
ITIL Foundations certification required within three (3) months of start date.</li><li>
Certifications: IAT -I CompTIA Security +CE, A+, CySA+, SSCP, CCNA - Security, GICSP, GSEC</li></ul><div><b>
Clearance:</b></div><ul><li>
TS/SCI Clearance required.</li></ul><div><b>
Location:</b></div><ul><li>
Adelphi, MD</li></ul>
About Tyto Athene:
<div><b>
Compensation:</b></div><ul><li>
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.</li></ul><div><b>
Benefits:</b></div><ul><li>
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.</li></ul><div></div><div><br>
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains&mdash;Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT&mdash;empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.</div><div>
</div><div>
At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?</div><div>
</div><div>
Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.</div></div>

DCO Analyst

Search 3265+ Threat analyst jobs near you this April. New roles added regularly across leading industries. Apply today.