Cloud Forensics CNDA - Remote Cyber Defense Analyst

ARGO Cyber Systems, LLC

Arlington (VA)

Hybrid

USD 120,000 - 160,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

Argo Cyber Systems, LLC is seeking a Cyber Network Defense Analyst (CNDA) with deep Cloud Forensics expertise to lead investigations across hybrid and multi-cloud environments. You will identify attack techniques, correlate artifacts, and drive containment with government cyber teams.

The role requires U.S. Citizenship and active TS/SCI clearance, 8+ years in DFIR, and proficiency across M365/Azure AD, AWS IAM, and SaaS investigations. Remote/onsite support a combined hybrid model is expected.

Qualifications

U.S. Citizenship and active TS/SCI clearance required.
Minimum 8 years of hands-on DFIR experience.
Expertise in cloud forensics, identity security, and hybrid infrastructure defense.
Proficiency in M365/Azure AD, AWS IAM, and SaaS investigations.
Deep understanding of SaaS/PaaS/IaaS architectures and attack vectors.
Evidence acquisition, volatile data capture, artifact analysis, and reporting.

Responsibilities

Conduct end-to-end forensic acquisition and analysis across on-prem, cloud, and hybrid environments (Azure AD/Entra ID, M365, AWS, GCP, SaaS).
Investigate identity-based and credential-abuse incidents targeting cloud control planes and hybrid identity.
Correlate cloud telemetry and network evidence to reconstruct attacker timelines and validate IOCs.
Develop and deploy automated detection logic, threat-hunting scripts, and playbooks using Sentinel, Defender, GuardDuty, and Chronicle.
Produce technical and executive-level reports integrating findings across endpoints, networks, and cloud assets.