Cyber Defense Analyst — Incident Response & Threat Hunting

Erias Ventures, LLC; Fort Meade (MD); On-site; USD 210,000 - 232,000; Full time

Benefits offered by this job

Above market pay

401k with vesting

Spot bonuses

Professional development

Medical coverage

Vision & dental

Disability & life insurance

Wellness reimbursement

Paid time off

Flexible schedules

Birthday off

Amazon Prime

Internet reimbursement

Equipment allowance

Company events

Job summary

Erias Ventures, LLC is seeking a Cyber Defense Analyst to monitor network activity, triage incidents, and protect data across enterprise infrastructure from their Fort Meade, MD office.

The role requires hands-on use of PCAP/netflow analysis, threat hunting, and SIEM tools (Splunk, ArcSight, Kibana, LogRhythm; Sentinel). You will generate cases, advise responders, and help secure critical systems with advanced analytics.

Qualifications

• Two years of practical experience in TCP/IP fundamentals.
• Three years of experience with network analysis and threat analysis software.
• DoD 8570 CSSP Analyst baseline certification and IAT CE certifications.
• GIAC GCIH or GCIA certification is required.
• Experience maintaining cloud environments (Azure, AWS) with Sentinel.

Responsibilities

• Monitor network activity using cyber defense tools and triage anomalous events.
• Generate cybersecurity cases with event history, status and potential impact.
• Perform PCAP, traffic, protocol, and netflow analysis for security-relevant anomalies.
• Identify adversarial TTPs and develop/ deploy signatures.
• Lead and mentor team members as a technical expert.
• Conduct after-action reviews of team products.

Skills

TCP/IP fundamentals

Traffic analysis tools

Splunk

ArcSight

Kibana

LogRhythm

Microsoft Sentinel

GIAC GCIH

GCIA

Azure

AWS

Education

Bachelors in a technical field

Tools

Bricata

tcpdump

Wireshark

Snort

Microsoft Sentinel

Job description

Erias Ventures, LLC is seeking a Cyber Defense Analyst to monitor network activity, triage incidents, and protect data across enterprise infrastructure from their Fort Meade, MD office.

The role requires hands-on use of PCAP/netflow analysis, threat hunting, and SIEM tools (Splunk, ArcSight, Kibana, LogRhythm; Sentinel). You will generate cases, advise responders, and help secure critical systems with advanced analytics.