Remote Cloud Forensics Cyber Defense Analyst

ARGO Cyber Systems; Arlington (VA); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Remote/Onsite as required

Job summary

Argo Cyber Systems is seeking Cyber Network Defense Analysts with deep Cloud Forensics expertise to support a high-visibility federal mission. The CNDA will lead investigations across hybrid and multi-cloud environments, identifying attacker TTPs, correlating artifacts, and driving containment with government cyber teams.

Responsibilities include end-to-end forensic analysis across Azure AD/Entra ID, M365, AWS, GCP, and SaaS, plus developing automated detection logic and reports for executive

Qualifications

• U.S. Citizenship with active TS/SCI clearance (DHS EOD eligibility).
• Minimum 8 years of hands-on DFIR experience.
• Proven cloud forensics, identity security, and hybrid infrastructure defense.
• Proficiency in M365/Azure AD, AWS IAM, and SaaS investigative methodologies.
• Deep understanding of SaaS/PaaS/IaaS architectures and defensive measures.
• Skilled in evidence acquisition, volatile data capture, artifact analysis, and technical reporting.

Responsibilities

• Lead end-to-end forensic acquisitions across on-prem, cloud, and hybrid environments.
• Investigate identity-based incidents targeting cloud control planes and hybrid identity.
• Correlate cloud telemetry and network evidence to reconstruct attacker timelines and IOCs.
• Develop automated detection logic, threat-hunting scripts, and playbooks.
• Produce technical and executive reports integrating findings across endpoints, networks, and cloud assets.
• Contribute to incident response process improvements and threat-hunting operations.
• Collaborate with Argo and government stakeholders to triage alerts and strengthen posture.

Skills

Cloud forensics

DFIR

Hybrid infra defense

M365/Azure AD

AWS IAM

SaaS investigations

Artifact analysis

Threat hunting

Scripting (PowerShell/Python)

Communication

Education

Bachelor's Degree in CS / Cybersecurity / CE or related

High School Diploma + 10+ years DFIR

Tools

Microsoft Sentinel

Defender

AWS GuardDuty

GCP Chronicle

Azure AD Entra ID

Terraform / Cloud automation

Kubernetes / Docker

Job description

Argo Cyber Systems is seeking Cyber Network Defense Analysts with deep Cloud Forensics expertise to support a high-visibility federal mission. The CNDA will lead investigations across hybrid and multi-cloud environments, identifying attacker TTPs, correlating artifacts, and driving containment with government cyber teams.

Responsibilities include end-to-end forensic analysis across Azure AD/Entra ID, M365, AWS, GCP, and SaaS, plus developing automated detection logic and reports for executive