Remote Cyber Defense Network Analyst II

Beyond SOF; Arlington (VA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Beyond SOF in Arlington, VA, is seeking a Network Based Systems Analyst - II to join a cyber defense team supporting critical missions. The role emphasizes network traffic analysis, incident response coordination, and signature development to detect modern threats.

Responsibilities include monitoring traffic, validating alerts, producing daily reports, and reconstructing attacks from network data. This position requires TS/SCI and U.S. citizenship, with hybrid onsite/remote work options.

Qualifications

• U.S. Citizenship is required.
• Active TS/SCI clearance is required.
• 2+ years of direct cyber defense analysis experience.
• Experience developing and deploying signatures.
• Experience detecting intrusions via IDS technologies such as Snort.
• Experience incident handling methodologies and protocol analyzers.

Responsibilities

• Characterize and analyze network traffic to identify threats.
• Coordinate with cyber defense staff to validate alerts.
• Document and escalate incidents with history and impact.
• Perform cyber defense trend analysis and reporting.
• Correlate events to gain situational awareness of attacks.
• Provide daily summaries of network events relevant to defense.
• Analyze alerts and determine possible causes within enterprise.
• Use defense tools for continuous monitoring and analysis.

Skills

Python programming

Education

BS in Computer Science, Cyber Security, Computer Engineering, or related degree

HS Diploma & 4+ years of network investigations experience

Tools

Snort

SiLK

Job description

Beyond SOF in Arlington, VA, is seeking a Network Based Systems Analyst - II to join a cyber defense team supporting critical missions. The role emphasizes network traffic analysis, incident response coordination, and signature development to detect modern threats.

Responsibilities include monitoring traffic, validating alerts, producing daily reports, and reconstructing attacks from network data. This position requires TS/SCI and U.S. citizenship, with hybrid onsite/remote work options.