Cybersecurity Defense Analyst

Invictus International Consulting, LLC; Alexandria (VA); On-site; USD 114,000 - 156,000; Full time

Job summary

Invictus International Consulting, LLC is seeking a Cybersecurity Defense Analyst in Alexandria, VA to join our security operations team. You will perform continuous monitoring, triage alerts, and analyze telemetry from SIEM, endpoints, and network sensors to detect threats and inform escalation.

The ideal candidate has a DoD/IC background, a TS/SCI clearance with CI poly, a technical degree or equivalent experience, and hands-on experience with security monitoring and incident response in a

Qualifications

• Bachelor's degree in a technical discipline or 4 years of relevant experience.
• Minimum two years of relevant cyber defense experience.
• Foundational knowledge of TCP/IP, DNS, HTTP/S and enterprise security concepts.
• Current DoD 8570 IAT II or IAM II certification.

Responsibilities

• Perform continuous monitoring and initial alert triage according to SOC procedures.
• Analyze logs and network activity to identify anomalies and document findings.
• Conduct cyber defense incident triage and escalation as needed.
• Enrich alerts with asset, user, network, vulnerability information before escalation.
• Document actions and maintain case turnover and escalation rationale.
• Escalate activities beyond procedures or indicating elevated risk.

Skills

SIEM

Network analysis

Threat monitoring

Documentation

Effective communication

Education

Bachelor's degree or equivalent experience

Tools

SIEM tools

Endpoint security tools

Network monitoring tools

Job description

Title: Cybersecurity Defense Analyst

Location: Alexandria, VA

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details

• Perform continuous monitoring and initial alert triage under established SOC procedures and analyst runbooks
• Perform cyber defense monitoring and analysis using security information from enterprise systems, networks, security sensors, firewalls, intrusion detection/prevention technologies, endpoint sources, and other available telemetry
• Analyze log files and network activity to identify anomalous or malicious behavior, determine potential security impact, and document investigative findings in the authorized case or ticketing system
• Perform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalation
• Conduct basic enrichment of alerts using available asset, user, network, vulnerability, and threat information before escalation
• Accurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases and shift-turnover requirements
• Escalate activity that exceeds established procedures or indicates increased risk, broader scope, or potential incident impact
• Participate in training, exercises, and qualification activities to build proficiency across SOC tools and investigative methods

Requirements

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years may be substituted in lieu of a degree
• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts
• Experience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools is desired
• Ability to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environment
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled

Salary: $135000 per year