Cybersecurity Blue Team Analyst – Intermediate

Sentinel Group; Chantilly, Northern (VA, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Sentinel Group is seeking an Intermediate Cybersecurity Blue Team Analyst in Chantilly, VA to perform defensive operations, risk assessments, and malware/vulnerability analysis. You will evaluate security controls, configurations, and architectures, producing detailed reports and remediation guidance.

You will mentor junior staff, stay current on emerging TTPs, and collaborate with stakeholders across IT and government environments. A Top Secret clearance is required, with polygraph desired.

Qualifications

• 3-7 years of cybersecurity or related field experience.
• Experience assessing diverse enterprise IT environments and technologies.
• Strong understanding of networking, OS, virtualization, cloud, IAM, and security architectures.
• Experience with security assessment and vulnerability-management tools.
• Experience analyzing logs and correlating information across IT platforms.
• Knowledge of NIST SP 800-53/800-37, RMF, STIGs, CIS benchmarks.
• Top Secret clearance required; counterintelligence polygraph desired.

Responsibilities

• Independently conduct comprehensive cybersecurity assessments of enterprise systems, networks, apps, cloud services, and infrastructure.
• Assess controls and configurations across Windows/Linux servers, endpoints, devices, and cloud services.
• Perform vulnerability assessment, configuration assessment, and remediation verification.
• Analyze attack paths and impacts of vulnerabilities and misconfigurations.
• Correlate security events to identify systemic risks and threats.
• Evaluate architectures against security requirements and standards.
• Develop rigorous assessment reports with findings and remediation.
• Brief stakeholders on results, risks, and priorities.
• Assist in developing methodologies, automated checks, and repeatable procedures.
• Mentor junior analysts and review assessment products.

Skills

Cybersecurity experience

Defensive operations

Vulnerability management

Security assessments

Reporting and documentation

Tools

SIEM

EDR/XDR

Vulnerability scanners

Configuration-management tools

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Blue Team Analyst - Intermediate

Full Time Chantilly, VA, US

5 days ago Requisition ID: 1049

Minimum Qualifications:

The Intermediate Cybersecurity Blue Team Analyst independently conducts cybersecurity assessments and defensive cyber operations across diverse enterprise IT environments. The analyst evaluates security controls, system configurations, architecture, vulnerabilities, security events, and operational practices to identify weaknesses and recommend risk-based improvements.

Responsibilities:

• Independently conduct comprehensive cybersecurity assessments of enterprise systems, networks, applications, cloud environments, and supporting infrastructure.
• Assess security controls and technical configurations across Windows and Linux servers, endpoints, network devices, firewalls, VPNs, virtualization platforms, cloud services, databases, web applications, identity systems, and enterprise management platforms.
• Perform vulnerability assessment, configuration assessment, security-control validation, and remediation verification.
• Analyze attack paths and potential impacts associated with identified vulnerabilities and misconfigurations.
• Correlate security events and findings across multiple IT platforms to identify systemic risks and emerging threats.
• Evaluate security architectures and implementations against applicable security requirements and enterprise security standards.
• Develop technically rigorous assessment reports documenting findings, risk, affected assets, evidence, and recommended remediation.
• Brief technical and government stakeholders on assessment results, cybersecurity risks, and remediation priorities.
• Assist in developing assessment methodologies, automated security checks, detection logic, and repeatable assessment procedures.
• Mentor junior analysts and review assessment products for technical accuracy and completeness.
• Maintain awareness of emerging vulnerabilities, adversary tactics, techniques, and procedures (TTPs).

Required Qualifications:

• 3-7 years of experience in cybersecurity, defensive cyber operations, information assurance, vulnerability management, security engineering, or a related field.
• Demonstrated experience assessing diverse enterprise IT environments and technologies.
• Strong understanding of enterprise networking, operating systems, virtualization, cloud infrastructure, applications, databases, identity and access management, and security architectures.
• Experience with security assessment and vulnerability-management tools and technologies such as SIEM, EDR/XDR, vulnerability scanners, network-security platforms, and configuration-management tools.
• Experience analyzing security logs and telemetry and correlating information across multiple security and IT platforms.
• Knowledge of NIST SP 800-53, NIST SP 800-37, RMF, STIGs, CIS benchmarks, and related cybersecurity requirements.
• Must hold Top Secret security clearance. Counterintelligence polygraph desired.