IL-7 Cyber Defense Countermeasure Engineer (Onsite)

Newberry Group; Island Ford (NC); On-site; USD 115,000 - 150,000; Full time

Benefits offered by this job

Sign-on bonus

Relocation assistance

Job summary

Newberry Group is seeking a Cyber Countermeasure Specialist to support the Joint Fires Network within secure SCIF environments on Ford Island, HI. You will engineer defenses, tune sensors, and author actionable containment playbooks to defend high‑risk DoD networks.

You will work with Corelight, Elastic Defend, and SIEM infrastructures, coordinating with NOC engineers and DIA standards, while maintaining rapid rollback and incident response capabilities in a TS/SCI environment.

Qualifications

• Bachelor’s degree in cybersecurity or related field with relevant intrusion detection experience
• Associate degree with 4+ years of experience in network defense or military cyber service in lieu of degree
• 4+ years of hands-on defense engineering and threat containment experience required
• Experience authoring detection rules and containment playbooks is expected
• Must possess TS/SCI eligibility and an active Top Secret clearance

Responsibilities

• Engineer, validate, deploy and maintain defensive countermeasures and containment workflows
• Tune and operate network sensors (Corelight, Elastic Defend) across multiple nodes
• Create and maintain detection rules, Zeek scripts, YARA, and SIEM logic
• Manage log ingestion pipelines and alerting for containment actions
• Track countermeasures in JIRA and perform de-confliction with DISA and authorities
• Develop runbooks and SOPs for incident containment and rapid rollback

Skills

Cyber defense

Threat containment

Incident response

SCIF operations

Education

Bachelor's degree or equivalent

Associate degree with 4+ years experience

Tools

Corelight

Elastic Defend

JIRA

Snort/Suricata

Zeek

YARA

Wireshark

Job description

Newberry Group is seeking a Cyber Countermeasure Specialist to support the Joint Fires Network within secure SCIF environments on Ford Island, HI. You will engineer defenses, tune sensors, and author actionable containment playbooks to defend high‑risk DoD networks.

You will work with Corelight, Elastic Defend, and SIEM infrastructures, coordinating with NOC engineers and DIA standards, while maintaining rapid rollback and incident response capabilities in a TS/SCI environment.