Cybersecurity Blue Team Analyst – Senior

Sentinel Group; Chantilly, Northern (VA, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Sentinel Group is seeking a Senior Cybersecurity Blue Team Analyst in Chantilly, VA. You will lead defensive assessments, analyze complex telemetry, and mentor junior staff to strengthen enterprise security across on‑prem, cloud, and hybrid environments.

You will evaluate architectures, controls, and incident data, coordinating across SIEM/EDR and vulnerability tools while delivering actionable guidance to leadership. A Top Secret clearance is required for this role.

Qualifications

• 7+ years of experience in cybersecurity or related field.
• Experience leading cybersecurity assessments across diverse enterprise IT environments.
• Expert knowledge of network architecture, operating systems, cloud, virtualization, IAM and security technologies.
• Experience with SIEM, EDR/XDR, vulnerability management, threat hunting, incident response and security analytics.
• Knowledge of NIST SP 800-53, 800-37, RMF, STIGs, CIS benchmarks and related standards.
• Ability to evaluate risks across multiple interconnected systems.
• Must hold Top Secret security clearance; counterintelligence polygraph desired.

Responsibilities

• Lead comprehensive cybersecurity assessments across complex, heterogeneous enterprise IT environments.
• Assess security architecture, controls, configurations, and telemetry across on-prem, cloud, hybrid, and distributed environments.
• Evaluate security of networks, Windows/Linux infrastructure, endpoints, apps, databases, and cloud services.
• Lead vulnerability assessments, configuration reviews, security-control assessments, threat hunts, and defensive measures.
• Analyze complex security events to identify adversary behaviors and escalation paths.
• Correlate data across SIEM, EDR/XDR, network, identity, cloud, and vulnerability-management platforms.
• Lead investigations of significant incidents and direct containment, eradication, and recovery.
• Translate findings into actionable guidance for government and senior technical leadership.
• Mentor and provide technical leadership to junior analysts.

Skills

Strong technical writing

Briefing skills

Analytical thinking

Leadership

Mentoring

Tools

SIEM

EDR/XDR

Vulnerability management

Network security

Threat hunting

Incident response

Security analytics

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Blue Team Analyst – Senior

Chantilly, VA, US

5 days ago Requisition ID: 1052

Minimum Qualifications:

The Senior Cybersecurity Blue Team Analyst serves as a technical authority for cybersecurity assessment and defensive cyber operations across complex enterprise IT environments. The analyst leads assessments of infrastructure, applications, networks, cloud environments, security architectures, and enterprise services; evaluates systemic cybersecurity risk; and develops actionable recommendations to improve the organization's defensive posture.

Responsibilities:

• Lead comprehensive cybersecurity assessments across complex, heterogeneous enterprise IT environments.
• Assess security architecture, controls, configurations, operational practices, and telemetry across on-premises, cloud, hybrid, and distributed environments.
• Evaluate security of enterprise networks, Windows and Linux infrastructure, endpoints, applications, databases, virtualization platforms, cloud services, identity and access management systems, network-security infrastructure, and security-management platforms.
• Lead vulnerability assessments, configuration reviews, security-control assessments, threat hunts, and defensive cyber assessments.
• Analyze complex security events and telemetry to identify sophisticated attacks, lateral movement, persistence mechanisms, privilege escalation, data exfiltration, and other adversary behaviors.
• Correlate information across SIEM, EDR/XDR, network, identity, cloud, application, vulnerability-management, and infrastructure-management platforms.
• Lead investigations of significant cybersecurity incidents and provide technical direction for containment, eradication, recovery, and lessons learned.
• Evaluate enterprise attack surfaces and identify systemic weaknesses spanning multiple systems or technology domains.
• Develop risk-based remediation strategies and prioritize findings based on mission impact, exploitability, exposure, and adversary activity.
• Lead development and improvement of cybersecurity assessment methodologies, automated assessment capabilities, detection strategies, and defensive analytics.
• Translate technical findings into actionable recommendations for government and senior technical leadership.
• Review and approve assessment plans, technical findings, reports, and remediation recommendations developed by other analysts.
• Mentor and provide technical leadership to entry- and intermediate-level analysts.
• Serve as a subject-matter expert on enterprise defensive cybersecurity, security assessment, vulnerability management, and threat detection.
• Track emerging vulnerabilities, attack techniques, adversary TTPs, and changes in enterprise technology to continuously improve assessment and defensive capabilities.

Required Qualifications:

• 7+ years of experience in cybersecurity, defensive cyber operations, security engineering, information assurance, vulnerability management, or a related field.
• Demonstrated ability to lead cybersecurity assessments across diverse and complex enterprise IT environments.
• Expert knowledge of enterprise network architecture, operating systems, cloud computing, virtualization, applications, databases, identity and access management, and cybersecurity technologies.
• Demonstrated experience with SIEM, EDR/XDR, vulnerability management, network security, threat hunting, incident response, and security analytics technologies.
• Expert knowledge of NIST SP 800-53, NIST SP 800-37, RMF, STIGs, CIS benchmarks, and related cybersecurity standards and practices.
• Ability to evaluate technical and architectural risks across multiple interconnected systems and technology domains.
• Strong technical writing, briefing, analytical, and leadership skills.
• Must hold Top Secret security clearance. Counterintelligence polygraph desired.