DFIR Analyst – CSOC & Threat Hunting

Peraton; Idaho; On-site; USD 80,000 - 128,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

Health Savings Account

Short/long term disability

EAP

Parental leave

401(k)

Paid time off (PTO)

Company paid holidays

Job summary

Peraton seeks a Digital Forensics and Incident Response (DFIR) Analyst to bolster our Corporate Cybersecurity Operations Center (CSOC). You will conduct large-scale cyber data analytics, lead detection technologies, and provide technical review of team member work.

The ideal candidate is decisive, deadline‑oriented, and produces high‑quality analytic output, interfacing with IT teams and business units to strengthen security across the enterprise.

Qualifications

• Bachelor’s Degree or 4 additional years of experience in a cybersecurity-related field in lieu of degree, or equivalent Security Operations work experience.
• Experience with Splunk Enterprise Security or Splunk Certified Power User. Advanced Splunk certification is a plus.
• DFIR experience using Endpoint Detection and Response (EDR) technologies.
• Experience performing forensic analysis on various evidence types including disk, memory, network, and cloud artifacts.
• Proficient with common scripting and programming languages.
• Experience with Risk Management Frameworks.
• In-depth understanding of common security controls for Windows, Linux, and network equipment.
• Strong attention to detail, time-management skills, and a professional demeanor.
• US Citizenship.

Responsibilities

• Protect the organization's IT assets as a member of the Cybersecurity Operations Center (CSOC).
• Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
• Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response efforts.
• Prepare CSOC reports documenting security incidents from discovery through remediation.
• Support vulnerability and cyber risk management by continuously monitoring threats and exposures.
• Test and evaluate technology solutions in preparation for both small and large‑scale deployments.
• Participate in periodic on‑call rotations supporting 24/7 cybersecurity operations.

Skills

DFIR experience

Scripting languages

Risk Management Frameworks

Attention to detail

Security controls knowledge

Education

Bachelor’s Degree or 4 additional years of cybersecurity-related experience

Tools

Splunk Enterprise Security

EDR technologies

Job description

Peraton seeks a Digital Forensics and Incident Response (DFIR) Analyst to bolster our Corporate Cybersecurity Operations Center (CSOC). You will conduct large-scale cyber data analytics, lead detection technologies, and provide technical review of team member work.

The ideal candidate is decisive, deadline‑oriented, and produces high‑quality analytic output, interfacing with IT teams and business units to strengthen security across the enterprise.