Onsite TS/SCI Cyber Real-Time Analyst — 24/7 SOC

The Newberry Group; Waipahu (HI); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Sign-on bonus

Relocation assistance

Job summary

The Newberry Group is seeking proactive Cyber Real Time Analysts to join our 24/7/365 SOC supporting Joint Fires Network operations at DISA Pacific, Ford Island, HI. This onsite role requires TS/SCI eligibility and contributes to monitoring, intrusion analysis, and incident response for IL-7 environments.

Responsibilities include real-time threat detection, log reviews, SIEM operations, and incident workflow in JIRA.

Qualifications

• Bachelor’s degree or equivalent in a technical field with relevant SOC/CND experience or military equivalent.
• Active DoD 8140 baseline certification or degree meeting DoD 8140 requirements is required before start.
• Experience in 24/7/365 security operations and incident response is preferred.

Responsibilities

• 24/7/365 real-time threat detection, watch operations, and triage across JFN components.
• Log aggregation, syslog auditing, and alert triage to identify malicious activity and configuration drift.
• Operate Elastic SIEM, analyze Kibana dashboards, and write basic alerts.
• Maintain standardized incident intake, triage, tracking, and escalation in JIRA across watch rotations.
• Develop, test, and maintain threat hunting playbooks and containment SOPs.

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related technical discipline

Tools

Elasticsearch/Kibana (ELK Stack)

JIRA

Corelight Zeek sensors

Darktrace MDR

Palo Alto ATP

Wireshark

tcpdump

Job description

The Newberry Group is seeking proactive Cyber Real Time Analysts to join our 24/7/365 SOC supporting Joint Fires Network operations at DISA Pacific, Ford Island, HI. This onsite role requires TS/SCI eligibility and contributes to monitoring, intrusion analysis, and incident response for IL-7 environments.

Responsibilities include real-time threat detection, log reviews, SIEM operations, and incident workflow in JIRA.