Defensive Cyber Ops Analyst: AI-Driven Threat Detection

Dark Wolf Solutions, LLC; Ogden (UT); On-site; USD 90,000 - 145,000; Full time

Job summary

Dark Wolf Solutions, LLC in Ogden, Utah, is seeking a Defensive Cyber Operations Analyst to monitor and respond to threats across on-prem ELK and AWS GovCloud Splunk environments. The role is on-site at Hill AFB and centers on hands-on incident response, threat detection, and rapid containment.

You will apply AI/ML-assisted analysis to triage security events, conduct intrusion analysis, and contribute to DCO TTPs while ensuring compliance with DoD requirements and supporting customer mitigation

Qualifications

• 4+ years of cybersecurity experience including direct SOC/vSOC/CSSP incident response.
• 2+ years using Splunk Enterprise and ELK for event correlation and threat detection.
• Experience with AWS GovCloud and DoD security requirements.

Responsibilities

• Monitor on-prem ELK and cloud AWS GovCloud environments for threats.
• Leverage AI-assisted analysis to triage events and speed response.
• Provide vulnerability guidance and mitigations.
• Conduct intrusion analysis and correlate unauthorized activity.
• Contribute to DoD DCO TTPs and supporting docs.

Skills

Incident response

AWS GovCloud experience

GitLab CI/CD

DoD compliance knowledge

Education

Bachelor's degree in Computer Science / IT

Tools

Splunk Enterprise

ELK Stack

GitLab

SPL/KQL queries

Job description

Dark Wolf Solutions, LLC in Ogden, Utah, is seeking a Defensive Cyber Operations Analyst to monitor and respond to threats across on-prem ELK and AWS GovCloud Splunk environments. The role is on-site at Hill AFB and centers on hands-on incident response, threat detection, and rapid containment.

You will apply AI/ML-assisted analysis to triage security events, conduct intrusion analysis, and contribute to DCO TTPs while ensuring compliance with DoD requirements and supporting customer mitigation