Job Requirements
Honolulu, HI
Top Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$105,000 - $145,000
Job Description
Overview
We are seeking a Cyber Intrusion Analyst to support a mission-critical Security Operations Center (SOC) responsible for protecting enterprise-level networks and systems. This position focuses on real-time cyber defense operations, incident detection and response, threat analysis, network monitoring, and security event investigation in a 24/7 operational environment.
The ideal candidate has experience working within a SOC, Cyber Defense, CSSP, or Computer Network Defense environment and is comfortable analyzing security events, investigating potential threats, and supporting mission-focused cyber operations.
Responsibilities
Perform computer network incident detection, analysis, and response activities.
Monitor and investigate alerts from SIEM and security monitoring platforms.
Conduct real-time event triage and recommend mitigation actions.
Analyze logs, network traffic, packet captures, NetFlow data, IDS/IPS alerts, and security telemetry.
Identify, investigate, and characterize suspicious or malicious activity.
Support enterprise cyber defense operations across Protect, Detect, Respond, and Sustain mission areas.
Configure and monitor security tools including firewalls, IDS/IPS, and cyber defense appliances.
Review and correlate security events from multiple data sources.
Develop, tune, and optimize detection rules, countermeasures, and monitoring capabilities.
Produce incident reports, trend analysis, and operational briefings.
Collaborate with government stakeholders, engineers, and fellow analysts to maintain situational awareness and improve network security posture.
Utilize scripting and automation to improve operational efficiency and analysis workflows.
Required Qualifications
Active Secret Clearance required.
Security+ certification required.
Ability to obtain CySA+ or CEH within six months of hire.
Minimum 2 years of Cyber Defense, Incident Response, or SOC analyst experience.
Experience with SIEM technologies such as Splunk, Elastic, or similar platforms.
Experience analyzing network traffic, logs, security events, and packet captures.
Knowledge of IDS/IPS technologies and network security monitoring.
Experience performing vulnerability assessments and cyber threat investigations.
Familiarity with firewall administration, network hardening, and security policy implementation.
Experience supporting Department of Defense environments.
Strong analytical and problem-solving abilities.
Preferred Qualifications
Active Top Secret Clearance.
Experience within a CSSP or Computer Network Defense environment.
CySA+, CEH, CISSP, GCIA, GCIH, or equivalent cybersecurity certifications.
Experience with Python, Perl, Shell Scripting, or automation tools.
Understanding of threat hunting methodologies and advanced intrusion detection techniques.
Experience supporting 24/7 Security Operations Centers.
Technical Skills
Splunk
Elastic
SIEM Technologies
IDS/IPS
Network Traffic Analysis
Packet Capture Analysis
Incident Response
Cyber Defense Operations
Vulnerability Assessment
Python
Shell Scripting
Security Monitoring
Firewall Administration
Threat Analysis
Work Environment
This position operates within a 24x7x365 Security Operations Center supporting mission-critical cyber operations. Analysts may be assigned to day, swing, or night shifts and will work alongside cybersecurity professionals responsible for protecting enterprise systems and networks against evolving cyber threats.
Desired Backgrounds
SOC Analyst
Cyber Security Analyst
Cyber Defense Analyst
Cyber Threat Analyst
Incident Response Analyst
Intrusion Detection Analyst
Information Security Analyst
Security Operations Center Analyst
We are seeking a Cyber Intrusion Analyst to support a mission-critical Security Operations Center (SOC) responsible for protecting enterprise-level networks and systems. This position focuses on real-time cyber defense operations, incident detection and response, threat analysis, network monitoring, and security event investigation in a 24/7 operational environment.
The ideal candidate has experience working within a SOC, Cyber Defense, CSSP, or Computer Network Defense environment and is comfortable analyzing security events, investigating potential threats, and supporting mission-focused cyber operations.
Responsibilities
Perform computer network incident detection, analysis, and response activities.
Monitor and investigate alerts from SIEM and security monitoring platforms.
Conduct real-time event triage and recommend mitigation actions.
Analyze logs, network traffic, packet captures, NetFlow data, IDS/IPS alerts, and security telemetry.
Identify, investigate, and characterize suspicious or malicious activity.
Support enterprise cyber defense operations across Protect, Detect, Respond, and Sustain mission areas.
Configure and monitor security tools including firewalls, IDS/IPS, and cyber defense appliances.
Review and correlate security events from multiple data sources.
Develop, tune, and optimize detection rules, countermeasures, and monitoring capabilities.
Produce incident reports, trend analysis, and operational briefings.
Collaborate with government stakeholders, engineers, and fellow analysts to maintain situational awareness and improve network security posture.
Utilize scripting and automation to improve operational efficiency and analysis workflows.
Required Qualifications
Active Secret Clearance required.
Security+ certification required.
Ability to obtain CySA+ or CEH within six months of hire.
Minimum 2 years of Cyber Defense, Incident Response, or SOC analyst experience.
Experience with SIEM technologies such as Splunk, Elastic, or similar platforms.
Experience analyzing network traffic, logs, security events, and packet captures.
Knowledge of IDS/IPS technologies and network security monitoring.
Experience performing vulnerability assessments and cyber threat investigations.
Familiarity with firewall administration, network hardening, and security policy implementation.
Experience supporting Department of Defense environments.
Strong analytical and problem-solving abilities.
Preferred Qualifications
Active Top Secret Clearance.
Experience within a CSSP or Computer Network Defense environment.
CySA+, CEH, CISSP, GCIA, GCIH, or equivalent cybersecurity certifications.
Experience with Python, Perl, Shell Scripting, or automation tools.
Understanding of threat hunting methodologies and advanced intrusion detection techniques.
Experience supporting 24/7 Security Operations Centers.
Technical Skills
Splunk
Elastic
SIEM Technologies
IDS/IPS
Network Traffic Analysis
Packet Capture Analysis
Incident Response
Cyber Defense Operations
Vulnerability Assessment
Python
Shell Scripting
Security Monitoring
Firewall Administration
Threat Analysis
Work Environment
This position operates within a 24x7x365 Security Operations Center supporting mission-critical cyber operations. Analysts may be assigned to day, swing, or night shifts and will work alongside cybersecurity professionals responsible for protecting enterprise systems and networks against evolving cyber threats.
Desired Backgrounds
SOC Analyst
Cyber Security Analyst
Cyber Defense Analyst
Cyber Threat Analyst
Incident Response Analyst
Intrusion Detection Analyst
Information Security Analyst
Security Operations Center Analyst
group id: 10105424
