Cybersecurity Defense Analyst

Invictus International; Alexandria (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

Invictus International is seeking a highly capable SOC Analyst to monitor, analyze, and triage cyber threats in a DoD/IC environment. You will work under SOC procedures, validate and enrich alerts, and escalate when needed.

The role requires a TS/SCI clearance with CI polygraph eligibility, a technical degree or equivalent experience, and DoD 8570 IAT II/IAM II certification. VA-based Alexandria area preferred, with strong incident response skills.

Qualifications

• Bachelor's degree in a technical discipline; an additional 4 years may substitute for degree
• Minimum two (2) years of relevant experience
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts
• Experience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools
• Ability to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environment
• Current DoD 8570 IAT II or IAM II certification; DoD/IC environment experience is desirable
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Responsibilities

• Perform continuous monitoring and initial alert triage under SOC procedures and analyst runbooks
• Perform cyber defense monitoring and analysis using telemetry from enterprise systems and security sensors
• Analyze log files and network activity to identify anomalies and document findings in the case system
• Conduct cyber defense incident triage, including validation, enrichment, scope, urgency, and escalation
• Enrich alerts with asset, user, network, vulnerability, and threat information before escalation
• Accurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases
• Escalate activity beyond procedures or indicating increased risk or broader impact
• Participate in training, exercises, and qualification activities to improve SOC tool proficiency

Skills

Cyber defense

Incident triage

Documentation

Communication

Education

Bachelor's degree in a technical discipline

DoD 8570 IAT II or IAM II certification

Tools

SIEM

Endpoint security tools

Network analysis tools

Job description

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

• Perform continuous monitoring and initial alert triage under established SOC procedures and analyst runbooks
• Perform cyber defense monitoring and analysis using security information from enterprise systems, networks, security sensors, firewalls, intrusion detection/prevention technologies, endpoint sources, and other available telemetry
• Analyze log files and network activity to identify anomalous or malicious behavior, determine potential security impact, and document investigative findings in the authorized case or ticketing system
• Perform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalation
• Conduct basic enrichment of alerts using available asset, user, network, vulnerability, and threat information before escalation
• Accurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases and shift-turnover requirements
• Escalate activity that exceeds established procedures or indicates increased risk, broader scope, or potential incident impact
• Participate in training, exercises, and qualification activities to build proficiency across SOC tools and investigative methods

Requirements:

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts
• Experience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools is desired
• Ability to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environment
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled

Helping all candidates find great careers is our goal. The information you provide here is secure and confidential.