Cyber Defense Analyst (Blue Team)

ADP, Inc.; Chantilly (VA); On-site; USD 90,000 - 140,000; Full time

Job summary

ADP, Inc. seeks an Intermediate Cybersecurity Blue Team Analyst to independently conduct cybersecurity assessments and defensive operations across diverse enterprise IT environments from Chantilly, VA.

The role emphasizes evaluating controls, configurations, vulnerabilities, and security events while producing risk-based remediation recommendations. The ideal candidate has 3–7 years in cybersecurity, familiarity with SIEM/EDR tools, and knowledge of NIST RMF and CIS benchmarks.

Qualifications

• 3-7 years of experience in cybersecurity, defensive cyber operations, information assurance, vulnerability management, security engineering, or a related field.
• Demonstrated experience assessing diverse enterprise IT environments and technologies.
• Strong understanding of enterprise networking, operating systems, virtualization, cloud infrastructure, applications, databases, identity and access management, and security architectures.
• Experience with security assessment and vulnerability-management tools and technologies such as SIEM, EDR/XDR, vulnerability scanners, network-security platforms, and configuration-management tools.
• Experience analyzing security logs and telemetry and correlating information across multiple security and IT platforms.
• Knowledge of NIST SP 800-53, NIST SP 800-37, RMF, STIGs, CIS benchmarks, and related cybersecurity requirements.
• Must hold Top Secret security clearance. Counterintelligence polygraph desired.

Responsibilities

• Independently conduct comprehensive cybersecurity assessments of enterprise systems, networks, applications, cloud environments, and supporting infrastructure.
• Assess security controls and technical configurations across Windows and Linux servers, endpoints, network devices, firewalls, VPNs, virtualization platforms, cloud services, databases, web applications, identity systems, and enterprise management platforms.
• Perform vulnerability assessment, configuration assessment, security-control validation, and remediation verification.
• Analyze attack paths and potential impacts associated with identified vulnerabilities and misconfigurations.
• Correlate security events and findings across multiple IT platforms to identify systemic risks and emerging threats.
• Evaluate security architectures and implementations against applicable security requirements and enterprise security standards.
• Develop technically rigorous assessment reports documenting findings, risk, affected assets, evidence, and recommended remediation.
• Brief technical and government stakeholders on assessment results, cybersecurity risks, and remediation priorities.
• Assist in developing assessment methodologies, automated security checks, detection logic, and repeatable assessment procedures.
• Mentor junior analysts and review assessment products for technical accuracy and completeness.
• Maintain awareness of emerging vulnerabilities, adversary tactics, techniques, and procedures (TTPs).

Job description

ADP, Inc. seeks an Intermediate Cybersecurity Blue Team Analyst to independently conduct cybersecurity assessments and defensive operations across diverse enterprise IT environments from Chantilly, VA.

The role emphasizes evaluating controls, configurations, vulnerabilities, and security events while producing risk-based remediation recommendations. The ideal candidate has 3–7 years in cybersecurity, familiarity with SIEM/EDR tools, and knowledge of NIST RMF and CIS benchmarks.