Cyber Threat Analyst (TS/SCI) – Advanced Defense

redalpha; Maryland; On-site; USD 165,000 - 225,000; Full time

Benefits offered by this job

401k up to 10% contributions

25 days paid time off

11 paid floating holidays

100% employee health insurance

Education stipend $5250/year

Merchandise allowance $300/year

Company events

Job summary

Red Alpha seeks an experienced Cyber Analyst to support advanced network security monitoring, threat analysis, and cyber defense operations in a Maryland-based role. You will analyze network traffic, identify malicious activity, and provide actionable intelligence to protect critical systems and infrastructure.

The ideal candidate has a Bachelor's in CS or related field and 7+ years in intelligence, information security, or security operations, with hands-on SIEM (Elastic/Splunk), TCP/IP, and

Qualifications

• Bachelor's Degree in Computer Science or a related technical discipline.
• At least seven (7) years of relevant experience in intelligence, information security, network forensics, or security operations.
• Ability to analyze and enrich data from multiple sources to generate actionable intelligence.
• Experience with XKS for querying, fingerprinting, and identifying anomalous activity.
• Proficiency with SIEM tools such as Elastic, Splunk, or similar platforms.
• Strong understanding of TCP/IP networking, packet analysis, and Wireshark.
• Experience developing detection signatures using Zeek and/or Snort.
• Knowledge of common cyber threats, attack vectors, and network defense strategies.
• Experience designing and implementing network monitoring and threat detection solutions.
• Ability to collaborate with technical teams to enhance cybersecurity capabilities.
• Strong documentation, reporting, and communication skills for technical and non-technical audiences.

Responsibilities

• Conduct advanced analysis of network traffic to identify, investigate, and assess potential cyber threats.
• Monitor and analyze security events using SIEM platforms and other network monitoring tools.
• Perform packet-level analysis using PCAP data and network forensic tools to identify suspicious or anomalous activity.
• Develop and refine detection methods, signatures, and monitoring strategies to improve threat visibility.
• Create queries, perform fingerprinting, and identify atypical events using specialized analytic platforms.
• Analyze and enrich data from multiple sources to generate actionable intelligence and security insights.
• Collaborate with development and engineering teams to define requirements and enhance cybersecurity capabilities.
• Evaluate common attack vectors and recommend defensive measures to strengthen network security.
• Document investigative findings, methodologies, and threat assessments in detailed reports.
• Present technical findings and recommendations to both technical and non-technical stakeholders.
• Support continuous improvement of cyber tradecraft, monitoring processes, and threat detection capabilities.

Skills

Network analysis

SIEM experience

TCP/IP networking

Wireshark

Fingerprinting

Education

Bachelor's Degree in Computer Science or related field

Tools

Elastic

Splunk

Zeek

Snort

XKS

Job description

Red Alpha seeks an experienced Cyber Analyst to support advanced network security monitoring, threat analysis, and cyber defense operations in a Maryland-based role. You will analyze network traffic, identify malicious activity, and provide actionable intelligence to protect critical systems and infrastructure.

The ideal candidate has a Bachelor's in CS or related field and 7+ years in intelligence, information security, or security operations, with hands-on SIEM (Elastic/Splunk), TCP/IP, and