On-Site AI-Driven Defensive Cyber Ops Analyst

Dark Wolf; Ogden (UT); On-site; USD 90,000 - 145,000; Full time

Job summary

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst for on-site assignment at Hill AFB in Ogden, UT. The role focuses on continuous system monitoring, incident response, and threat detection across on-prem ELK and AWS GovCloud with Splunk Enterprise, enhanced by AI/ML techniques.

You will perform hands-on monitoring, correlation, and remediation, support root cause analysis, and contribute to the development of DCO tactics and procedures.

Qualifications

• 4+ years of relevant cybersecurity experience, including incident response.
• 2+ years of hands-on experience using Splunk Enterprise and ELK Stack for event correlation and threat detection.
• Direct experience monitoring, ingesting, and analyzing security telemetry within AWS GovCloud environments.

Responsibilities

• Active monitoring, detection, and analysis across on-prem (ELK) and cloud-hosted AWS GovCloud (Splunk Enterprise) environments.
• Utilize AI-assisted analysis and data correlation to triage security events and reduce response times.
• Vulnerability management actions including recommendations and mitigations.
• Conduct intrusion analysis and correlation of unauthorized activities; provide recommendations to improve detection.
• Participate in Root Cause Analysis and documentation of mitigation actions.
• Draft documentation for briefings, reports, and informational analyses.
• Perform other duties as required by the department.

Skills

Cybersecurity experience

AWS GovCloud

DoD cybersecurity requirements

IAT CSSP Certification

Top Secret/SCI clearance

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Splunk Enterprise

ELK Stack (Elasticsearch, Logstash, Kibana)

GitLab

Job description

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst for on-site assignment at Hill AFB in Ogden, UT. The role focuses on continuous system monitoring, incident response, and threat detection across on-prem ELK and AWS GovCloud with Splunk Enterprise, enhanced by AI/ML techniques.

You will perform hands-on monitoring, correlation, and remediation, support root cause analysis, and contribute to the development of DCO tactics and procedures.