Remote Cloud Forensics & Network Defense Analyst

ARGO Cyber Systems; Arlington (VA); Hybrid; USD 130,000 - 160,000; Full time

Job summary

Argo Cyber Systems seeks a Cyber Network Defense Analyst (CNDA) with deep cloud forensics expertise for a high-visibility federal mission. You will lead investigations across hybrid and multi‑cloud environments, identifying attacker TTPs, correlating artifacts, and driving containment with government cyber teams.

Responsibilities include end‑to‑end forensics, cloud telemetry correlation, and automated detection logic development using Microsoft Sentinel and AWS GuardDuty.

Qualifications

• U.S. Citizenship with active TS/SCI clearance and DHS EOD eligibility.
• Minimum 8 years in digital forensics and incident response (DFIR).
• Proven cloud forensics, identity security, and hybrid infrastructure defense.
• Proficient in M365/Azure AD, AWS IAM, and SaaS investigative methods.
• Deep understanding of SaaS/PaaS/IaaS architectures and typical attack vectors.
• Strong evidence acquisition, volatile data capture, artifact analysis, and reporting.

Responsibilities

• Perform end-to-end forensic acquisition and analysis across on‑prem, cloud, and hybrid environments (Azure AD/Entra ID, M365, AWS, GCP, SaaS).
• Investigate identity-based and credential abuse incidents targeting cloud control planes and hybrid identity infra.
• Correlate cloud telemetry and network data to reconstruct attacker timelines and IOC validation.
• Develop automated detection logic, threat-hunting scripts, and playbooks using Sentinel, Defender, GuardDuty, Chronicle.
• Produce technical and executive reports integrating findings across endpoints, networks, and cloud assets.
• Support continuous improvement of IR procedures, forensics workflows, and threat-hunting operations.
• Collaborate with Argo and government stakeholders to triage alerts and strengthen detection and response.

Skills

Cloud forensics

DFIR

Hybrid cloud

M365/Azure AD

SaaS/PaaS/IaaS

Education

Bachelor's Degree in CS/Cybersecurity

High School + 10+ years DFIR

Tools

Terraform

Kubernetes

Docker

CloudFormation

Azure RM

Job description

Argo Cyber Systems seeks a Cyber Network Defense Analyst (CNDA) with deep cloud forensics expertise for a high-visibility federal mission. You will lead investigations across hybrid and multi‑cloud environments, identifying attacker TTPs, correlating artifacts, and driving containment with government cyber teams.

Responsibilities include end‑to‑end forensics, cloud telemetry correlation, and automated detection logic development using Microsoft Sentinel and AWS GuardDuty.