Cyber Defense Analyst: TS/SCI + Poly | DoD-Ready

Invictus International Consulting, LLC.; Colorado Springs (CO); On-site; USD 90,000 - 120,000; Full time

Job summary

Invictus International Consulting, LLC in Colorado Springs seeks a Cybersecurity Defense Analyst to monitor networks, triage alerts, and document investigations using enterprise telemetry and SOC runbooks.

The role requires TS/SCI with CI polygraph, DoD 8570 IAM II/IAT II certification, and at least two years of relevant experience; it also demands knowledge of TCP/IP, DNS, HTTP/S and SIEM/endpoint security tools.

Qualifications

• Bachelor's degree or 4 years of substitution in a technical discipline, plus two years of relevant experience
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts; DoD environment preferred
• Current DoD 8570 IAM II or IAT II certification; TS/SCI clearance required or ability to obtain

Responsibilities

• Perform continuous monitoring and initial alert triage under SOC procedures and analyst runbooks
• Analyze logs and network activity to identify anomalous or malicious behavior and document findings
• Perform cyber defense incident triage, validation, enrichment, and escalation as needed
• Document actions, evidence, findings, and escalation rationale; maintain case turnover readiness
• Escalate activity exceeding procedures or increasing risk; participate in training and qualification activities

Skills

TCP/IP

DNS

HTTP/S

Authentication

Operating systems

SIEM

Security monitoring

Network analysis

Endpoint security

Documentation

8570 IAM II

Education

Bachelor's degree in a technical discipline

Tools

SIEM systems

EDR tools

Job description

Invictus International Consulting, LLC in Colorado Springs seeks a Cybersecurity Defense Analyst to monitor networks, triage alerts, and document investigations using enterprise telemetry and SOC runbooks.

The role requires TS/SCI with CI polygraph, DoD 8570 IAM II/IAT II certification, and at least two years of relevant experience; it also demands knowledge of TCP/IP, DNS, HTTP/S and SIEM/endpoint security tools.