DoD Cyber Analyst — Threat Hunting & Incident Response

JAAW™ Group; Hill Air Force Base (UT); On-site; USD 85,000 - 115,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan with employer"s

Job summary

The JAAW Group LLC located at Hill Air Force Base, UT is seeking a Cyber Analyst to monitor DoD systems, investigate alerts, and support incident response. The role emphasizes continuous security monitoring, threat hunting, and collaboration with ISSOs and Security Engineers to strengthen security posture.

The position requires a Secret clearance (Top Secret preferred), a DoD‑familiar environment, and an agile, mission‑focused mindset. On‑site work at Hill AFB with full‑time hours is expected.

Qualifications

• Active Secret clearance required; Top Secret preferred.
• Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or related field; relevant certifications may be considered in lieu of a degree.
• 2–5 years of experience in security monitoring, SOC/NOC operations, cyber defense, or related cybersecurity role.
• Hands‑on experience with SIEM platforms, with Splunk preferred.
• Working knowledge of vulnerability management tools such as Nessus and ACAS.
• Familiarity with STIG compliance tools such as SCAP Compliance Checker and Evaluate-STIG.
• Working knowledge of TCP/IP networking and network security fundamentals.
• Familiarity with cybersecurity incident response processes and documentation standards.
• Strong troubleshooting, analytical, communication, and problem‑solving skills.
• Ability to work effectively in an Agile, fast‑paced, mission‑focused environment.
• Willingness to support shift‑based or on‑call coverage as required.

Responsibilities

• Monitor SIEM platforms, including Splunk, for security events, alerts, and anomalous activity across mission systems.
• Triage and investigate cybersecurity alerts and elevate confirmed incidents in accordance with established procedures.
• Perform proactive threat hunting to identify indicators of compromise and suspicious activity.
• Participate in cybersecurity incident handling and response activities, including documenting findings and recovery actions.
• Support root-cause investigations for confirmed security incidents.
• Coordinate with ISSOs, Security Engineers, and other cybersecurity personnel on incident reporting, remediation, and recovery activities.
• Support vulnerability scanning and assessment activities using Nessus and ACAS.
• Assist with STIG compliance verification using SCAP Compliance Checker, Evaluate-STIG, or similar DoD cybersecurity tools.
• Contribute findings to Plan of Action and Milestones (POA&M) tracking and remediation efforts.
• Document detection logic, investigation procedures, playbooks, and other cybersecurity processes.
• Partner with Security Engineers to improve security telemetry, detection capabilities, and alert tuning.
• Participate in Agile delivery activities, including sprints, standups, retrospectives, and continuous process improvement.

Skills

SIEM (Splunk) experience

Vulnerability management

STIG compliance knowledge

TCP/IP networking basics

Incident response

Agile / Scrum

Analytical problem solving

Education

Bachelor's degree in CS/Info Assurance/Cybersecurity

Tools

Splunk

Nessus

ACAS

SCAP Compliance Checker

Evaluate-STIG

Docker

Kubernetes

Job description

The JAAW Group LLC located at Hill Air Force Base, UT is seeking a Cyber Analyst to monitor DoD systems, investigate alerts, and support incident response. The role emphasizes continuous security monitoring, threat hunting, and collaboration with ISSOs and Security Engineers to strengthen security posture.

The position requires a Secret clearance (Top Secret preferred), a DoD‑familiar environment, and an agile, mission‑focused mindset. On‑site work at Hill AFB with full‑time hours is expected.