Cybersecurity Blue Team Analyst – Intermediate

SENTINEL GROUP LLC; Chantilly (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

SENTINEL GROUP LLC in Chantilly, VA is seeking an Intermediate Cybersecurity Blue Team Analyst to conduct comprehensive assessments across enterprise systems, networks, and cloud environments. The role emphasizes identifying weaknesses, improving security controls, and reporting findings with remediation priorities.

The candidate should have 3–7 years in cybersecurity, experience with SIEM/EDR/XDR, and knowledge of NIST RMF and CIS benchmarks.

Qualifications

• 3–7 years of experience in cybersecurity or related field.
• Experience assessing diverse enterprise IT environments and technologies.
• Strong understanding of enterprise networking, operating systems, virtualization, cloud, databases, identity and access management, and security architectures.
• Experience with security assessment and vulnerability-management tools and technologies such as SIEM, EDR/XDR, vulnerability scanners, network-security platforms, and configuration-management tools.
• Knowledge of NIST SP 800-53, NIST SP 800-37, RMF, STIGs, CIS benchmarks, and related cybersecurity requirements.

Responsibilities

• Independently conduct comprehensive cybersecurity assessments of enterprise systems, networks, applications, cloud environments, and supporting infrastructure.
• Assess security controls and technical configurations across Windows and Linux servers, endpoints, network devices, firewalls, VPNs, virtualization platforms, cloud services, databases, web applications, identity systems, and enterprise management platforms.
• Perform vulnerability assessment, configuration assessment, security-control validation, and remediation verification.
• Analyze attack paths and potential impacts associated with identified vulnerabilities and misconfigurations.
• Correlate security events and findings across multiple IT platforms to identify systemic risks and emerging threats.
• Evaluate security architectures and implementations against applicable security requirements and enterprise security standards.
• Develop technically rigorous assessment reports documenting findings, risk, affected assets, evidence, and recommended remediation.
• Brief technical and government stakeholders on assessment results, cybersecurity risks, and remediation priorities.
• Assist in developing assessment methodologies, automated security checks, detection logic, and repeatable assessment procedures.
• Mentor junior analysts and review assessment products for technical accuracy and completeness.
• Maintain awareness of emerging vulnerabilities, adversary tactics, techniques, and procedures (TTPs).

Skills

Cybersecurity

Defensive cyber operations

Vulnerability management

Security architecture

Tools

SIEM

EDR/XDR

Vulnerability scanners

Configuration-management tools

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Blue Team Analyst – Intermediate

Full Time Chantilly, VA, US

Minimum Qualifications:

The Intermediate Cybersecurity Blue Team Analyst independently conducts cybersecurity assessments and defensive cyber operations across diverse enterprise IT environments. The analyst evaluates security controls, system configurations, architecture, vulnerabilities, security events, and operational practices to identify weaknesses and recommend risk-based improvements.

Responsibilities:

• Independently conduct comprehensive cybersecurity assessments of enterprise systems, networks, applications, cloud environments, and supporting infrastructure.
• Assess security controls and technical configurations across Windows and Linux servers, endpoints, network devices, firewalls, VPNs, virtualization platforms, cloud services, databases, web applications, identity systems, and enterprise management platforms.
• Perform vulnerability assessment, configuration assessment, security-control validation, and remediation verification.
• Analyze attack paths and potential impacts associated with identified vulnerabilities and misconfigurations.
• Correlate security events and findings across multiple IT platforms to identify systemic risks and emerging threats.
• Evaluate security architectures and implementations against applicable security requirements and enterprise security standards.
• Develop technically rigorous assessment reports documenting findings, risk, affected assets, evidence, and recommended remediation.
• Brief technical and government stakeholders on assessment results, cybersecurity risks, and remediation priorities.
• Assist in developing assessment methodologies, automated security checks, detection logic, and repeatable assessment procedures.
• Mentor junior analysts and review assessment products for technical accuracy and completeness.
• Maintain awareness of emerging vulnerabilities, adversary tactics, techniques, and procedures (TTPs).

Required Qualifications:

• 3–7 years of experience in cybersecurity, defensive cyber operations, information assurance, vulnerability management, security engineering, or a related field.
• Demonstrated experience assessing diverse enterprise IT environments and technologies.
• Strong understanding of enterprise networking, operating systems, virtualization, cloud infrastructure, applications, databases, identity and access management, and security architectures.
• Experience with security assessment and vulnerability-management tools and technologies such as SIEM, EDR/XDR, vulnerability scanners, network-security platforms, and configuration-management tools.
• Experience analyzing security logs and telemetry and correlating information across multiple security and IT platforms.
• Knowledge of NIST SP 800-53, NIST SP 800-37, RMF, STIGs, CIS benchmarks, and related cybersecurity requirements.
• Must hold Top Secret security clearance. Counterintelligence polygraph desired.