Blue Team Lead / Sr Cyber Defense Analyst

Indigo IT, LLC; Fort Bragg (NC); On-site; USD 125,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, and Vision coverage

401(k) with company match

Group life and disability

Flex Spending Accounts

Paid Time Off

Paid holidays

Education assistance

Job summary

Indigo IT is seeking a Blue Team Lead / Sr Cyber Defense Analyst at Ft. Bragg, NC to lead advanced cyber threat investigations, threat hunting, and incident response for DoD/federal clients.

You will develop detection content, mentor junior analysts, and coordinate with Cyber Threat Intelligence to strengthen enterprise monitoring. Active DoD Secret clearance and security certifications are preferred.

Qualifications

• 7+ years leading cyber defense, threat hunting, or SOC teams in DoD/federal environments.
• Strong SIEM, network/endpoint detection, and threat-hunting knowledge.
• Active DoD Secret clearance and security certifications preferred.

Responsibilities

• Lead investigation and analysis of advanced cyber threats and incidents.
• Plan and execute proactive threat hunting to uncover hidden malicious activity.
• Develop and maintain detection content (SIEM, YARA, Snort/Suricata).
• Collaborate with CTI to validate detection signatures in monitoring environment.
• Provide technical leadership during incident response and support containment.
• Mentor Tier 1/2 Analysts and improve team capabilities.
• Refine detection strategies and recommend process/tool improvements.
• Prepare reports and communicate risks to leadership.

Skills

Threat hunting

SOC leadership

Incident response

DoD experience

Education

DoD Secret clearance

Security+

CASP

CISSP

Tools

SIEM

YARA

Snort

Suricata

Endpoint protection

Job description

Position: Blue Team Lead / Sr Cyber Defense Analyst

Location: Ft. Bragg, NC

Pay Range: $125,000 - $150,000 per year

Position Summary

Founded in 2001, Indigo IT is an award winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers' technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. As a Veteran-Friendly employer, we are proudly partnered with the Virginia Values Veterans (V3) Program, and a recipient of the HIRE Vets Gold Medallion Award, which recognizes our commitment to recruiting our nation's Veterans. Recognized on the Inc. 5000 list of America's fastest growing companies in 2020 & 2021 and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

Key Responsibilities

• Lead the investigation and analysis of advanced cyber threats, suspected APT activity, and complex security incidents.
• Plan and execute proactive threat hunting operations to identify malicious activity not detected by traditional security controls.
• Develop, test, and maintain detection content, including SIEM correlation rules, YARA rules, Snort/Suricata signatures, and host-based detection policies.
• Collaborate with Cyber Threat Intelligence (CTI) teams to validate and promote new detection signatures into the enterprise security monitoring environment.
• Provide technical leadership during incident response activities and support containment, eradication, and recovery efforts.
• Mentor and provide on-the-job training to Tier 1 and Tier 2 Cyber Defense Analysts, improving team capabilities and operational effectiveness.
• Continuously refine detection strategies and recommend improvements to cyber defense processes, tools, and procedures.
• Prepare technical reports, document findings, and communicate risks and recommendations to leadership.

Preferred Qualifications

• 7+ years experience leading cyber defense, threat hunting, or Security Operations Center (SOC) teams in a DoD or federal environment.
• Strong knowledge of SIEM platforms, network and endpoint detection technologies, and threat detection methodologies.
• Experience creating detection content using tools such as YARA, Snort, Suricata, and host-based security solutions.
• Understanding of adversary tactics, techniques, and procedures (MITRE ATT&CK) and advanced persistent threat (APT) behaviors.
• Active DoD Secret clearance
• Desired certifications: Security+, CASP, CISSP

Benefits

• Medical, Dental, and Vision coverage options.
• 401(k) with company match.
• Group life and disability.
• Flex Spending Accounts (FSA).
• Paid Time Off (PTO).
• Paid holidays.
• Education assistance.

Indigo IT is committed to hiring and retaining a diverse workforce.

We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.

This employer uses E-Verify.