Defensive Security Analyst-Washington, DC
Role summary
Cyber Focus AII is seeking a Defensive Security Analyst in Washington, DC, for a remote role. The position involves managing and monitoring Security Operations Center (SOC) systems, providing expertise for incident response and digital forensics, and conducting various types of forensic analysis. The analyst will also develop reports for technical and executive audiences. Required qualifications include a TS/SCI clearance, SOC experience, SIEM knowledge, proficiency in scripting languages like PowerShell, Python, and Bash, and availability during US Eastern Time business hours with on-call capabilities. Preferred qualifications include penetration testing experience and the ability to train others.
Cyber Focus AII's mission is to help cybersecurity professionals discover cutting-edge opportunities in their field. We are not a staffing firm or agency. Cyber Focus AI does not hire for these roles—we use advanced technology to locate and verify them from actual employers.
Employer Industry: Information Security
Why Consider This Job Opportunity
- Salary up to $160,000 annually, commensurate with experience
- Comprehensive health, dental, vision, and life insurance fully covered for employees and their families
- Flexible time-off policy and 13 paid holidays annually
- $5,000 annual professional development allowance and $5,250 towards continuing education or student loan repayment
- Remote work opportunity with a $1,500 new hire allowance for home office setup
- Engaging company culture with in-person and virtual employee events throughout the year
What To Expect (Job Responsibilities)
- Support client engineering by managing and monitoring Security Operations Center (SOC) systems
- Provide expertise for incident response activities and digital forensics, including the preservation of system logs and memory captures
- Conduct host forensics, network forensics, log analysis, and malware triage in support of hunt operations
- Interface with client contacts and staff in a professional manner
- Develop comprehensive reports and presentations for both technical and executive audiences
What Is Required (Qualifications)
- Current TS/SCI Clearance
- Established experience in operating in a SOC environment
- Knowledge of operating and maintaining a SIEM
- Proficiency in programming or scripting languages such as PowerShell, Python, and Bash
- Availability during operating hours of Monday through Friday, 9 AM - 6 PM US Eastern Time, with the ability to respond to urgent incidents after hours or on weekends
How To Stand Out (Preferred Qualifications)
- Experience in penetration testing
- Ability to quickly learn new technologies and stay current with the latest advancements
- Experience training others on forensic and incident response techniques and tools
#InformationSecurity #CyberSecurity #CareerOpportunity #CompetitiveBenefits #RemoteWork
We prioritize candidate privacy and champion equal-opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.
We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top-tier employer.
#CyberFocusAI