Cyber Security Analyst

Cybersecurity AnalystAnalyze network traffic and security telemetry including NetFlow, custom application logs, intrusion detection system (IDS) alerts, and full packet capture (PCAP) data to identify malicious activity and emerging threats.Conduct cyber threat hunting and investigations using intelligence reporting, open-source intelligence (OSINT), threat feeds, and vulnerability data.Identify, investigate, and analyze indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), and potential security incidents.Correlate data from SIEMs, sensors, system logs, and intelligence sources to detect adversary campaigns, anomalous behavior, and enterprise threats.Develop written analytical products, risk assessments, and recommendations to improve the organization's security posture and reduce attack surface exposure.Support the creation and refinement of Cyber Fusion Standard Operating Procedures (SOPs), methodologies, and operational frameworks.Assess threats and vulnerabilities impacting enterprise networks and recommend mitigation strategies and countermeasures.Produce attack lifecycle visualizations and technical briefings to communicate findings to stakeholders.Monitor cyber trends, collect operational metrics, and provide situational awareness reporting to leadership.Support continuous improvement efforts by leveraging industry best practices, government guidance, and evolving threat intelligence.Active TS/SCI clearance with eligibility for polygraph.Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline; additional relevant experience may be considered in lieu of a degree.Security+ certification or equivalent DoD 8570 IAT Level II certification.Strong understanding of: Network protocols (TCP/IP, OSI Model), Cyber vulnerabilities and exploitation techniques, Threat actor methodologies and attack frameworks, Incident response and cyber defense operations.Experience utilizing cyber analysis and threat intelligence tools such as: Splunk, ArcSight, Wireshark, Recorded Future, VirusTotal, Passive DNS, WHOIS, Threat intelligence platforms.Experience analyzing network data including NetFlow, PCAPs, IDS/IPS alerts, and custom application logs.Experience leveraging commercial and open-source intelligence resources to identify, assess, and mitigate cyber threats.Experience supporting DISN or other DoD enterprise networks.Experience building cybersecurity dashboards, metrics, analytics, and trend reporting.Knowledge of intelligence-driven defense methodologies, MITRE ATT&CK, and Cyber Kill Chain concepts.Experience briefing senior government leadership, including SES and GO/FO personnel.IAT Level III and/or IAM Level II/III certifications (CASP+, CISSP, GSLC, etc.).