Remote DFIR Analyst: Threat Hunting & CSOC

VulnU; United States; Remote; USD 80,000 - 128,000; Full time

Benefits offered by this job

Paid parental leave

25 days PTO

Job summary

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to join its Corporate Cybersecurity Operations Center (CSOC) in a remote capacity. The role focuses on large-scale cyber data analytics, threat hunting, and technical review of team output to defend IT assets and improve security controls across the enterprise.

The ideal candidate brings DFIR experience, proficiency with Splunk, EDR tools, scripting ability, and knowledge of risk management frameworks.

Qualifications

• Bachelor’s Degree or equivalent Security Operations experience.
• Experience with Splunk Enterprise Security or Splunk Certified Power User; advanced Splunk certification a plus.
• DFIR experience using Endpoint Detection and Response (EDR) technologies.
• Experience performing forensic analysis on disk, memory, network, and cloud artifacts.
• Proficient with common scripting and programming languages.
• Experience with Risk Management Frameworks.
• Strong understanding of security controls for Windows, Linux, and networks.
• US Citizenship required.

Responsibilities

• Protect the organization's IT assets as a member of the CSOC.
• Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
• Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response.
• Prepare CSOC reports documenting security incidents from discovery through remediation.
• Support vulnerability and cyber risk management by monitoring threats and exposures.
• Test and evaluate technology solutions in preparation for deployments.
• Participate in on-call rotations supporting 24/7 cybersecurity operations.

Skills

Splunk Enterprise Security

EDR technologies

Forensic analysis

Scripting & programming

Risk Management Frameworks

Windows/Linux security

Attention to detail

US Citizenship

Education

Bachelor’s Degree or equivalent experience

Tools

Splunk

EDR tools

Job description

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to join its Corporate Cybersecurity Operations Center (CSOC) in a remote capacity. The role focuses on large-scale cyber data analytics, threat hunting, and technical review of team output to defend IT assets and improve security controls across the enterprise.

The ideal candidate brings DFIR experience, proficiency with Splunk, EDR tools, scripting ability, and knowledge of risk management frameworks.