Title: Cybersecurity Defense Analyst Location: Colorado Springs, COClearance: TS/SCI with the ability to obtain and maintain a CI polygraph Job Details:Perform continuous monitoring and initial alert triage under established SOC procedures and analyst runbooksPerform cyber defense monitoring and analysis using security information from enterprise systems, networks, security sensors, firewalls, intrusion detection/prevention technologies, endpoint sources, and other available telemetryAnalyze log files and network activity to identify anomalous or malicious behavior, determine potential security impact, and document investigative findings in the authorized case or ticketing systemPerform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalationConduct basic enrichment of alerts using available asset, user, network, vulnerability, and threat information before escalationAccurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases and shift-turnover requirementsEscalate activity that exceeds established procedures or indicates increased risk, broader scope, or potential incident impactParticipate in training, exercises, and qualification activities to build proficiency across SOC tools and investigative methods Requirements:Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree Minimum two (2) years of relevant experience in addition to education level Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security conceptsExperience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools is desiredAbility to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environmentMust possess current DoD 8570 IAT II or IAM II certification Experience working in a DoD or IC environment desired Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph Equal Opportunity Employer/Veteran/Disabled
Job Posted by ApplicantPro