Cyber Defense Analyst II — TS/SCI Clearance (Poly)

the-swift-group; Maryland; On-site; USD 110,000 - 140,000; Full time

Job summary

Swift is seeking a Cyber Defense Analyst 2 to join a growing team in Annapolis Junction, MD. The role performs advanced network monitoring, threat analysis, and intrusion detection in support of enterprise defense operations.

Requirements include four years of CDA experience (or a two-year substitution with a technical bachelor's degree), TCP/IP fundamentals, experience with Wireshark/tcpdump, SIEM (Splunk/ArcSight/Kibana), cloud experience (Azure/AWS), DoD 8570 CSSP Analyst baseline, DoD 8570

Qualifications

• Four years of CDA experience in similar scope.
• 1 year TCP/IP fundamentals.
• 1 year experience with network traffic analysis tools (Wireshark, tcpdump).
• 2 years SIEM experience (Splunk, ArcSight, Kibana).
• 2 years network and threat analysis experience.
• Splunk Fundamentals I course completion.
• DoD 8570 CSSP Analyst baseline certification.
• DoD 8570 IAT Level I or II.
• CE certification.
• 2 years maintaining or managing cloud environments (Azure, AWS).
• US citizenship and an active TS/SCI with Polygraph security clearance required.

Responsibilities

• Perform advanced manual threat hunting.
• Conduct PCAP and packet-level analysis.
• Perform network traffic, protocol, and netflow analysis.
• Analyze malicious activity and identify exploited weaknesses.
• Correlate enterprise security events for situational awareness.
• Understand IDS/IPS tuning and Snort filters.
• Identify Command and Control (C2) indicators.
• Detect host- and network-based intrusions.

Skills

TCP/IP fundamentals

Wireshark

tcpdump

SIEM

Splunk

ArcSight

Kibana

Network analysis

Threat analysis

Education

Bachelor's degree (technical)

Tools

Wireshark

tcpdump

Splunk

ArcSight

Kibana

Job description

Swift is seeking a Cyber Defense Analyst 2 to join a growing team in Annapolis Junction, MD. The role performs advanced network monitoring, threat analysis, and intrusion detection in support of enterprise defense operations.

Requirements include four years of CDA experience (or a two-year substitution with a technical bachelor's degree), TCP/IP fundamentals, experience with Wireshark/tcpdump, SIEM (Splunk/ArcSight/Kibana), cloud experience (Azure/AWS), DoD 8570 CSSP Analyst baseline, DoD 8570