Cyber Network Defense Analyst

Location: San Antonio, TX
Work Arrangement: 100% Onsite
Clearance: Active TS/SCI required
Certification: DoD IAT Level II or higher

Position Overview:
We are seeking a Cyber Network Defense Analyst to support a mission-critical cybersecurity and network defense operation in San Antonio, TX.
This position supports a highly secure enterprise environment responsible for protecting networked systems and services from cyber threats. The analyst will perform hands-on security monitoring, incident detection, alert investigation, analysis, and response activities while supporting an organization transitioning toward a secure cloud environment.

The ideal candidate has previous SOC, Cyber Network Defense, or Security Operations experience and possesses a strong understanding of networking, operating systems, security monitoring technologies, and incident investigation.

This is a 100% onsite position in San Antonio, TX and requires an active TS/SCI clearance.

Primary Responsibilities:
- Perform cyber and network security incident detection and response activities.
- Detect, correlate, identify, and characterize anomalous activity that could indicate threats to enterprise systems or networks.
- Monitor security tools and applications for potentially malicious activity.
- Investigate security alerts and indicators and determine appropriate next steps.
- Develop response and mitigation recommendations based on investigative findings.
- Analyze network and system logs to identify potentially suspicious activity.
- Document security events, investigative findings, and analysis accurately within ticketing or case-management systems.
- Monitor and analyze security technologies, including IDS/IPS and firewall solutions.
- Perform required system and security checks and ensure supporting documentation is complete and accurate.
- Assist senior analysts and leadership with analysis of current and emerging threats.
- Collaborate with infrastructure, storage, database, application, and other technical teams to support cybersecurity operations.
- Support network defense requirements as enterprise services transition into secure cloud environments.
- Communicate directly with customers and technical stakeholders regarding cybersecurity issues.
- Contribute to improvements in security operations processes and procedures.

Required Qualifications:
- Active TS/SCI U.S. Government security clearance.
- Bachelor's degree and 2+ years of related cybersecurity, SOC, or network defense experience. Additional relevant experience, education, or training may be considered in lieu of a degree.
- Current DoD 8140 IAT Level II or Level III certification, such as Security+ CE.
- Experience with cybersecurity monitoring, threat detection, incident investigation, or network defense operations.
- Strong knowledge of networking concepts and common communications protocols.
- Working knowledge of Windows and Linux environments.
- Familiarity with cloud platforms such as AWS or Azure.
- Familiarity with common network security technologies, including IDS/IPS and firewalls.
- Ability to investigate security events and clearly document technical findings.

Preferred Qualifications:
- Previous Computer Network Defense (CND) or SOC experience within a large enterprise, DoD, or Intelligence Community environment.
- Experience monitoring network defense or intrusion-detection technologies and investigating associated alerts.
- Experience with SIEM and log-analysis platforms such as Splunk or Elastic.
- Experience performing manual and automated analysis of system, security, and network logs.
- Experience documenting cybersecurity investigations and providing response or mitigation recommendations through a ticketing or case-management platform.
- Knowledge of DISA security practices, guidance, or mission environments.
- Experience applying security configurations using vendor guidance and DISA security best practices.
- Understanding of disaster recovery and business continuity concepts within secure or cloud-based environments.
- Security monitoring or incident response experience involving AWS or Azure.

Why This Opportunity?
This position provides the opportunity to perform meaningful, hands-on cyber defense work within a mission-critical environment. Analysts aren't limited to passively monitoring security tools. They investigate suspicious activity, correlate technical evidence, document findings, recommend response actions, and work alongside other technical teams to help protect a highly secure enterprise.


-------------
Company Benefits:
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)