Cyber Defense Analyst | TS/SCI | Threat Hunting & IR

ESR Healthcare; Suitland (MD); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Referral bonus $2,000

Job summary

ESR Healthcare is seeking a Cyber Defense Analyst for our Suitland, MD location to monitor and respond to security events on TS/SCI networks.

The role covers first-line monitoring, incident management, threat hunting, and support for annual cyber defense exercises. A Top Secret/SCI clearance is required, with 5+ years in cyber defense and hands-on experience with SIEM tools and network security devices.

Qualifications

• Active TS/SCI clearance with 5+ years in Cyber/Network Defense.
• Bachelor’s in cybersecurity or 8+ years experience in lieu of a degree.
• 5+ years in CND discipline.
• 3+ years monitoring and investigating SIEM/IDS/IPS alerts.
• Experience with Splunk and Elastic SIEM.
• Experience with Cisco FirePower, Palo Alto NGFW and host tools.
• Scripting: Python, PowerShell, JavaScript, C/C++.
• Familiarity with Kali, Burp Suite, Nmap, Metasploit.

Responsibilities

• Perform first line monitoring of security tools and initial analysis for TS/SCI networks.
• Monitor security tools for alerts, anomalies, and indicators of compromise.
• Investigate and escalate incidents to Tier 2 as needed.
• Create and manage incident tickets in the ticketing system.
• Conduct proactive threat hunting to identify malicious activity.
• Conduct wireless security scans and report findings.
• Correlate events across platforms to identify patterns.
• Prepare operational and situational awareness briefings.
• Support annual cyber defense exercises.

Skills

SIEM

Network IDS/IPS

Python scripting

Threat hunting

Incident response

Education

Bachelor's degree in Cybersecurity or related field

8+ years of professional experience in lieu of degree

Tools

Splunk

Elastic SIEM

Cisco FirePower

Palo Alto NGFW

Trellix ePO

Microsoft Defender

Tanium

Kali

Burp Suite

Nmap

Metasploit

Job description

ESR Healthcare is seeking a Cyber Defense Analyst for our Suitland, MD location to monitor and respond to security events on TS/SCI networks.

The role covers first-line monitoring, incident management, threat hunting, and support for annual cyber defense exercises. A Top Secret/SCI clearance is required, with 5+ years in cyber defense and hands-on experience with SIEM tools and network security devices.