Cybersecurity Defense Analyst

Invictus International Consulting, LLC; Colorado Springs (CO); On-site; USD 120,000 - 150,000; Full time

Job summary

Invictus International Consulting, LLC in Colorado Springs, CO is seeking a Cybersecurity Defense Analyst to perform continuous monitoring and initial alert triage under SOC procedures. You will analyze logs and network activity to identify anomalous behavior and document findings in approved case systems.

The role requires TS/SCI with CI polygraph eligibility and DoD/IC experience. Ideal candidates have a technical degree or equivalent experience, at least two years in cyber defense, and

Qualifications

• Bachelor's degree or 4 additional years may be substituted for degree.
• Minimum two (2) years of relevant experience.
• DoD 8570 IAT II or IAM II certification required.
• Current TS/SCI clearance with the ability to obtain CI polygraph.

Responsibilities

• Perform continuous monitoring and initial alert triage per SOC procedures.
• Analyze logs and network activity to identify anomalies and document findings.
• Conduct cyber defense incident triage, including scope and escalation.
• Enrich alerts using asset, user, network, vulnerability information.
• Maintain case/ticketing system records and ensure proper turnover.

Skills

TCP/IP knowledge

Networking fundamentals

Analytical thinking

Effective communication

Education

Bachelor's degree in a technical discipline

Tools

SIEM

Security monitoring tools

Endpoint security solutions

Job description

Title: Cybersecurity Defense Analyst

Location: Colorado Springs, CO

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details

• Perform continuous monitoring and initial alert triage under established SOC procedures and analyst runbooks
• Perform cyber defense monitoring and analysis using security information from enterprise systems, networks, security sensors, firewalls, intrusion detection/prevention technologies, endpoint sources, and other available telemetry
• Analyze log files and network activity to identify anomalous or malicious behavior, determine potential security impact, and document investigative findings in the authorized case or ticketing system
• Perform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalation
• Conduct basic enrichment of alerts using available asset, user, network, vulnerability, and threat information before escalation
• Accurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases and shift-turnover requirements
• Escalate activity that exceeds established procedures or indicates increased risk, broader scope, and potential incident impact
• Participate in training, exercises, and qualification activities to build proficiency across SOC tools and investigative methods

Requirements

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts
• Experience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools is desired
• Ability to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environment
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled

Salary: $135000 per year