On-Site Cyber Defense Analyst — CSOC & Splunk

MIT Lincoln Laboratory; Lexington (MA); On-site; USD 81,000 - 105,000; Full time

Benefits offered by this job

Health, dental, vision plans

MIT-funded pension

401K matching

Paid leave (vacation, sick, parental,

Tuition reimbursement

Mentorship programs

Work-life balance options

Job summary

MIT Lincoln Laboratory's Digital Solutions Cyber Security Sector is seeking a Cyber Security Analyst to monitor and protect Laboratory information systems, including classified networks. The role supports a high-side CSOC and requires operating tools like Splunk, Nessus/ACAS, and ePO within accreditation boundaries.

Responsibilities include incident response coordination, vulnerability remediation, and security posture reporting.

Qualifications

• 2+ years in information security technology field.
• Familiarity with SIEMs, log aggregation, vulnerability scanning, remediation, and endpoint protection.
• Experience with Linux and Windows server management and diagnosing security logs.
• Knowledge of vulnerabilities, risk rating, and mitigation strategies; Nessus experience preferred.
• Familiarity with containers, container security, and DevSecOps.
• Security+ or higher certs and commitment to ongoing training.
• Ability to work 100% on site and obtain DoD clearance.

Responsibilities

• Monitor and protect Laboratory information systems within a classified environment.
• Operate CSOC tools (Splunk, ACAS, ESS) and support incident response.
• Coordinate vulnerability management and communicate findings to stakeholders.

Skills

Scripting (bash, PowerShell, Python)

SIEM & log analysis

Vulnerability management

Threat hunting & OC/IR

DoD compliance awareness

Education

BS in IT-related field

Tools

Splunk

ACAS

ESS

Job description

MIT Lincoln Laboratory's Digital Solutions Cyber Security Sector is seeking a Cyber Security Analyst to monitor and protect Laboratory information systems, including classified networks. The role supports a high-side CSOC and requires operating tools like Splunk, Nessus/ACAS, and ePO within accreditation boundaries.

Responsibilities include incident response coordination, vulnerability remediation, and security posture reporting.