Cyber Defense Analyst: Incident Response & Threat Analytics

Bespoke Technologies, Inc.; Chantilly (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Bespoke Technologies, Inc. in Chantilly, VA, is seeking a Cyber Security Analyst to bolster the Sponsor's cybersecurity posture across systems and applications. You will analyze security data, support accreditation efforts, and guide incident response activities.

The role requires hands-on expertise in SIEM, cloud security, vulnerability management, and security controls, with the ability to develop playbooks and communicate risk to stakeholders.

Qualifications

• Demonstrated experience with real-time prevention, detection, and remediation of cyberattacks on internet-facing systems.
• Experience in offensive (pentesting/red team) or defensive (SOC/IR/threat hunting) cyber operations.
• Scripting in Python/PowerShell/Bash for automation and analysis.
• Experience with SIEMs (Splunk/QRadar/Elastic Stack).
• Experience with AWS cloud logging (CloudTrail/CloudWatch).
• Knowledge of network protocols, packet capture, and netflow analysis.
• Understanding of OSes (Windows/Linux) and cloud environments (AWS/Azure/GCP).
• Experience with attack vectors and defensive countermeasures.
• Experience with A&A packages and security approvals.
• Ability to review assessment reports and develop mitigations (POA&Ms).
• Experience ensuring continuous monitoring and compliance of systems.
• Experience drafting SSPs and security requirements (A&A).
• Experience writing/reviewing NIST 800-53 controls.
• Experience running Rapid7 scans.
• Experience with AWS cloud security.
• Experience with Tableau for dashboards.
• Capable of working independently and in team environments.

Responsibilities

• Deliver improvements to cybersecurity posture through analysis and reporting of security data.
• Design, implement, and optimize security monitoring to detect threats.
• Lead and participate in cyber incident response (investigation, containment, eradication, recovery).
• Develop and refine incident response playbooks and procedures.
• Conduct comprehensive vulnerability assessments and penetration tests to identify weaknesses.
• Evaluate the effectiveness of existing security controls on Sponsor systems.
• Provide guidance on security system design and implementing controls and technologies.
• Perform deep dive analytics to inform network engineering decisions.
• Ensure Sponsor systems are secured and accredited with required approvals.
• Create and maintain documentation for accreditation.
• Track actions related to accreditation and report status to stakeholders.
• Leverage AI to support security investigations.
• Overwatch and monitor per Sponsor policies.
• Analyze security data to identify issues and inform remediation steps.
• Maintain documentation of incidents, vulnerabilities, and mitigations.
• Educate Sponsor teams on cybersecurity best practices.
• Contribute to cyber policies, standards, and procedures.
• Support data collection, evaluation, and publication in documents and reports.
• Develop methods to track and report cybersecurity metrics for management.

Skills

Real-time cyber defense

Offensive/defensive cyber ops

Scripting (Python/PowerShell/Bash)

SIEM (Splunk/QRadar/Elastic)

AWS Cloud logging (CloudTrail/CloudW

Network analysis (packet capture/netflo

Windows/Linux OS & cloud (AWS/Azure/G

Attack vectors & countermeasures

A&A packages & security approvals

POA&M & risk mitigation

SSP & NIST 800-53 controls

Tableau data visualizations

Rapid7 scans

Tools

Tableau

Splunk

QRadar

Elastic Stack

Rapid7

Nmap

Metasploit

Job description

Bespoke Technologies, Inc. in Chantilly, VA, is seeking a Cyber Security Analyst to bolster the Sponsor's cybersecurity posture across systems and applications. You will analyze security data, support accreditation efforts, and guide incident response activities.

The role requires hands-on expertise in SIEM, cloud security, vulnerability management, and security controls, with the ability to develop playbooks and communicate risk to stakeholders.