Cyber Defense Analyst II – Flexible Schedule & Paid Training

RealmOne; Baltimore (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

RealmOne is seeking a Cyber Defense Analyst II to monitor and analyze network activity, identify anomalies, and generate actionable incident reports. You will leverage SIEM tools, PCAP analysis, and threat-hunting methods to protect data and infrastructure while aligning with DoD security requirements.

The role requires DoD 8570 CSSP baseline, IAT I/II, CE certifications, and an active polygraph. You will work on mission-critical security engagements across Azure/AWS environments and collaborate

Qualifications

• Four years of CDA experience in programs of similar scope.
• Bachelor's degree may substitute for two years of CDA experience.
• One year of TCP/IP fundamentals experience.
• One year of tcpdump or Wireshark experience.
• Two years of SIEM experience (Splunk/ArcSight/Kibana/LogRhythm).
• Two years of network and threat analysis software usage.
• Cloud experience in Azure/AWS with Microsoft Sentinel.
• DoD 8570 CSSP Analyst baseline certification required.
• IAT Level I or II certification required.
• CE certification required.
• Active security clearance with polygraph

Responsibilities

• Use cyber defense tools to monitor, detect, analyze, categorize, and triage anomalous activity.
• Generate cybersecurity cases with event history and action recommendations.
• Apply detection methods to defend against network abuses and intrusions.
• Conduct PCAP/network analysis and identify attack phases.
• Perform event correlation to assess incident impact and respond accordingly.

Skills

TCP/IP basics

PCAP analysis

Network forensics

Event correlation

Threat hunting

Education

Bachelor's degree in a related field

Tools

tcpdump

Wireshark

Splunk

ArcSight

Kibana

LogRhythm

Job description

RealmOne is seeking a Cyber Defense Analyst II to monitor and analyze network activity, identify anomalies, and generate actionable incident reports. You will leverage SIEM tools, PCAP analysis, and threat-hunting methods to protect data and infrastructure while aligning with DoD security requirements.

The role requires DoD 8570 CSSP baseline, IAT I/II, CE certifications, and an active polygraph. You will work on mission-critical security engagements across Azure/AWS environments and collaborate