AI-Driven Defensive Cyber Operations Analyst

BuddoBot Inc.; Ogden (UT); On-site; USD 90,000 - 145,000; Full time

Job summary

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst to monitor, detect, and respond to cyber threats across on-prem ELK and AWS GovCloud Splunk environments. The role requires hands-on incident response, threat detection, and rapid containment actions at Hill AFB in Ogden, Utah.

You will leverage AI/ML-assisted analysis, perform vulnerability management, root-cause analysis, and contribute to DCO TTP development.

Qualifications

• 4+ years of cybersecurity incident response experience (SOC/vSOC/CSSP).
• 2+ years using Splunk Enterprise and ELK for correlation and threat detection.
• Experience monitoring AWS GovCloud (CloudTrail, VPC Flow Logs, GuardDuty).
• Hands-on GitLab usage in CI/CD pipelines or DevSecOps workflows.

Responsibilities

• Active monitoring and threat analysis across on-prem ELK and AWS GovCloud Splunk environments.
• Use AI-assisted analysis to triage events and reduce response times.
• Conduct vulnerability management and implement mitigations.
• Perform root-cause analysis and document remediation efforts.
• Develop DCO TTPs and supporting documentation.
• Draft briefings, reports, and analyses for stakeholders.
• Support customer exercises and adhere to policies.

Skills

SOC incident response

Splunk Enterprise

ELK Stack

AWS GovCloud

GitLab/DevSecOps

DoD cyber requirements

Education

Bachelor's degree

Tools

GitLab

KQL/SPL

Job description

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst to monitor, detect, and respond to cyber threats across on-prem ELK and AWS GovCloud Splunk environments. The role requires hands-on incident response, threat detection, and rapid containment actions at Hill AFB in Ogden, Utah.

You will leverage AI/ML-assisted analysis, perform vulnerability management, root-cause analysis, and contribute to DCO TTP development.