Senior Cyber Defense Analyst & Threat Hunter

RealmOne; Columbia (MD); On-site; USD 197,000 - 227,000; Full time

Benefits offered by this job

Healthcare coverage

401K

Paid Time Off

Professional development

Udemy access

Flexible schedules

Job summary

RealmOne, headquartered in Columbia, MD, seeks a Cyber Defense Analyst III to monitor networks, triage anomalous activity, and report events to protect data, information systems, and infrastructure within mission-critical cyber defense programs. The position requires DoD 8570 CSSP Analyst baseline, IAT CE certification, GIAC GCIH/GCIA, successful Splunk training, and an active polygraph security clearance.

RealmOne offers extensive healthcare, 401K, PTO, and professional development

Qualifications

• Eight (8) years of demonstrated CDA experience or equivalent on similar programs.
• Two (2) years of demonstrated and practical TCP/IP fundamentals knowledge.
• Three (3) years of experience with SIEM suites (Splunk, ArcSight, Kibana, LogRhythm).
• Three (3) years of demonstrated experience in network analysis and threat software utilization.

Responsibilities

• Use cyber defense tools to monitor, detect, analyze, categorize, and triage anomalous activity.
• Generate cybersecurity cases with event history and status for action.
• Apply knowledge of network protocols to defend against related abuses.
• Perform advanced manual analysis to hunt threats.
• Conduct PCAP analysis and network traffic investigations.
• Identify attack phases and employ intrusion detection techniques.
• Lead and mentor team members as a technical expert.

Skills

TCP/IP fundamentals

Network traffic analysis

SIEM platforms

PCAP analysis

Network intrusion detection

Active directory abuse knowledge

Incident response

Mentoring

Education

Technical bachelor’s degree

Tools

Bricata

tcpdump

Wireshark

Splunk

ArcSight

Kibana

LogRhythm

Job description

RealmOne, headquartered in Columbia, MD, seeks a Cyber Defense Analyst III to monitor networks, triage anomalous activity, and report events to protect data, information systems, and infrastructure within mission-critical cyber defense programs. The position requires DoD 8570 CSSP Analyst baseline, IAT CE certification, GIAC GCIH/GCIA, successful Splunk training, and an active polygraph security clearance.

RealmOne offers extensive healthcare, 401K, PTO, and professional development