On-Site CND Analyst - TS/SCI Clearance, Incident Response

Maximus; Arlington (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Maximus is seeking an experienced Computer Network Defense Analyst to support the Defense Information Systems Agency (DISA) CESO program in Rosslyn, VA. This on-site role requires an active Top Secret clearance with SCI eligibility and involves monitoring, incident response, and threat investigation across CESO operations.

The candidate will analyze security telemetry, investigate anomalous activity, document findings, and coordinate with technical teams supporting mission-critical services.

Qualifications

• Bachelor's degree or 4 years of relevant work experience in cybersecurity operations.

Responsibilities

• Perform computer network defense monitoring, detection, analysis, and incident-response activities.
• Monitor cybersecurity tools and applications for alerts and investigate identified events.
• Collect and analyze information from security telemetry and logs.
• Correlate and analyze cybersecurity events to develop escalation and mitigation recommendations.
• Document security events, findings and response actions in ticketing systems.
• Collaborate with various teams to align monitoring with CESO requirements.
• Identify opportunities to improve CND processes and workflows.

Skills

Cybersecurity monitoring

Incident response

SIEM analysis

Network defense

Windows & Linux

Cloud (AWS, Azure)

Technical writing

Communication

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or related field

4 years of relevant work experience may be considered in lieu of the degree

Tools

Splunk

Elastic

Job description

Maximus is seeking an experienced Computer Network Defense Analyst to support the Defense Information Systems Agency (DISA) CESO program in Rosslyn, VA. This on-site role requires an active Top Secret clearance with SCI eligibility and involves monitoring, incident response, and threat investigation across CESO operations.

The candidate will analyze security telemetry, investigate anomalous activity, document findings, and coordinate with technical teams supporting mission-critical services.