24/7 DoD Cyber Threat Analyst (On-Site)

thenewberrygroup; O'Fallon (IL); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Medical coverage

Paid time off

Retirement plan

Job summary

Newberry Group's Public Sector Division seeks Cybersecurity Analysts for a 24/7 Cyber Network Defense (CND) operation at Scott Air Force Base in Illinois. You will analyze real-time threat intel, correlate events, and conduct network traffic analysis to uncover and mitigate threats.

Candidates must hold an active DoD Secret clearance; Top Secret is preferred. On-site work with three shifts (7am–3pm, 3pm–11pm, 11pm–7am) is required in this role.

Qualifications

• Active DoD Secret clearance or above.
• DoD 8140 IAT level II or higher certification (e.g., Security+ CE, CySA+, SSCP, SANS GSEC) prior to starting.
• DoD 8140 CSSP-A level Certification (CEH, CySA+, GCIA, or similar) required within 180 days of hire.
• Strong networking foundation, packet analysis, OSI model, and defense-in-depth security.
• Bachelor's degree with 1+ years (Level I) or 3+ years (Level II) experience, or equivalent.

Responsibilities

• Investigate alerts from endpoints, IDS/IPS, NetFlow, and sensors to detect compromises.
• Analyze logs, pivot datasets, and generate detailed technical incident reports.
• Triaged security alerts to identify malicious actors among customer networks.
• Monitor DoD/open-source intelligence feeds to identify IOCs for sensors and SIEMs.
• Report incidents to customers and USCYBERCOM with timely coordinated response.

Skills

DoD 8140 IAT II

Network packet analysis

Threat detection

Incident response collaboration

Shift work flexibility

Education

Bachelor's degree

1+ years relevant experience

Equivalent experience/military service

Tools

SIEM/SOAR platforms

NetFlow analysis

Packet capture tools

IDS/IPS

Job description

Newberry Group's Public Sector Division seeks Cybersecurity Analysts for a 24/7 Cyber Network Defense (CND) operation at Scott Air Force Base in Illinois. You will analyze real-time threat intel, correlate events, and conduct network traffic analysis to uncover and mitigate threats.

Candidates must hold an active DoD Secret clearance; Top Secret is preferred. On-site work with three shifts (7am–3pm, 3pm–11pm, 11pm–7am) is required in this role.