Master Level Cyber Defense Analyst​/Intrusion Detection Team Shift Lead

Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead Job#: 3040587

Job Description:

Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment.

Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead

Location:

Washington, District of Columbia (Partial Remote)

Role Overview An organization is seeking an experienced Master Level Cyber Defense Analyst / Detection Team Shift Lead to support a high-tempo Security Operations Center (SOC) environment. This role combines advanced cyber threat analysis, intrusion detection, threat intelligence, and team leadership responsibilities. The ideal candidate brings experience investigating security events, analyzing network and host-based threats, leveraging SIEM technologies, and leading cybersecurity operations personnel in a mission-critical environment.

Key Responsibilities Lead and support a team of intrusion detection and cyber defense analysts during daily SOC operations.

Identify, analyze, and coordinate remediation efforts for cyber threats and security incidents.

Provide actionable intelligence to incident response teams and cybersecurity stakeholders.

Assess organizational security posture by correlating cyber threat intelligence with network and system activity.

Conduct advanced analysis of intrusion signatures, attack methodologies, tactics, techniques, and procedures (TTPs).Perform investigations involving SIEM data, IDS/IPS alerts, firewall logs, packet captures, and network traffic.

Research emerging threats, vulnerabilities, exploits, and adversary techniques.

Develop intelligence reports, technical findings, and executive briefings for leadership.

Support cyber incident response activities and threat-hunting initiatives.

Required Qualifications Bachelor's degree and 8+ years of cybersecurity, intrusion detection, or cyber defense experience.

Minimum 7 years of experience analyzing security events across IDS/IPS, network, host, and application logging technologies.

Minimum 2 years of experience serving as a Cyber Security or Security Operations Center Shift Lead.

Experience using Splunk SIEM, including advanced searches and query development.

Experience analyzing IDS/IPS events, firewall ACLs, network traffic, packet captures (PCAPs), web server logs, raw log data, and Snort-based intrusion detection events.

Experience operating within an enterprise SIEM environment.

Written and verbal communication skills with the ability to brief technical and non-technical stakeholders.

Required Certifications Candidates must possess at least one of the following:

Certified Information Systems Security Professional (CISSP)
Systems Security Certified Practitioner (SSCP)
GIAC Certified Intrusion Analyst (GCIA)
GIAC Certified Enterprise Defender (GCED)
GIAC Certified Perimeter Protection Analyst (GPPA)
EC-Council Certified Security Analyst (ECSA)
Additionally required:

Splunk Fundamentals ISplunk Fundamentals II Preferred Qualifications Threat hunting and intelligence analysis

Security Operations Center (SOC) leadership

Incident response support

Malware and adversary research

Advanced log analysis and correlation

Government or large enterprise cyber defense experience

Work Environment

This role offers multiple shift options. The first shift is from 7:00 AM to 3:30 PM. The second shift is from 3:00 PM to 11:30 PM. The night shift operates from 11:00 PM to 7:30 AM and is fully remote. The day and evening shifts are hybrid, with an option for remote work on Fridays.

Interview & Hiring Process If you are selected to move forward, the process includes a virtual video interview where a camera must be on and a valid photo  be presented. The hiring process involves…