Senior Cybersecurity Defense Analyst III

invictusic; Colorado Springs (CO); On-site; USD 120,000 - 170,000; Full time

Job summary

invictusic is seeking a Senior Cyber Defense Analyst III in Colorado Springs to lead advanced investigations, triage incidents, and coordinate response across networks, endpoints, and identities. You will mentor junior analysts, develop runbooks, and drive post-incident reviews within a DoD/IC environment.

The role requires TS/SCI clearance with the ability to obtain/maintain a CI polygraph, a Bachelor's degree or equivalent experience, and substantial hands-on cybersecurity experience in

Qualifications

• Significant hands-on cybersecurity investigations experience in enterprise environments.
• Strong knowledge of network/host-based investigation, ATT&CK framework.
• Experience developing or improving SOC procedures, playbooks, or analyst training materials.
• Experience serving as escalation point, technical lead, or mentor for cyber defense analysts.

Responsibilities

• Lead advanced investigation of complex security events across networks and endpoints.
• Perform cyber defense incident triage, including scope, urgency, impact, and escalation.
• Support incident handling from detection to reporting per procedures.
• Correlate data across sources to identify affected systems, adversary activity, and events.
• Preserve intrusion artifacts and investigative evidence per procedures.
• Communicate incident status and risk to SOC, tech teams, and management.
• Mentor junior analysts and provide hands-on guidance during complex investigations.
• Lead portions of incident response activities and post-incident reviews.
• Develop and improve analyst runbooks, playbooks, and escalation criteria.
• Partner with engineers to identify telemetry gaps and automation opportunities.
• Translate lessons learned into improved detections and defenses.

Skills

Cyber defense investigations

Incident response

Mentoring

Education

Bachelor's degree or 4 years substitution

Job description

Title: Senior Cyber Defense Analyst III

Location: Colorado Springs, CO

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details:

• Perform and lead advanced investigation of complex security events and incidents across network, endpoint, identity, firewall, vulnerability, and other available telemetry
• Perform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalation
• Support incident handling across detection, investigation, analysis, containment/remediation coordination, recovery, and reporting in accordance with established authorities and procedures
• Correlate incident and security data across multiple sources to identify affected systems, users, vulnerabilities, adversary activity, and related events
• Collect and preserve relevant intrusion artifacts and investigative evidence in accordance with established procedures
• Communicate incident status, findings, risk, and recommended actions to SOC personnel, technical teams, management, and government stakeholders as appropriate
• Serve as a senior technical escalation point to less expereinced team members and provide hands-on guidance during complex investigations
• Lead portions of incident response activities, including scoping, evidence analysis, containment recommendations, technical coordination, and post-incident review
• Conduct proactive analysis and threat hunting when warranted to identify related or previously undetected activity
• Develop, maintain, and improve analyst runbooks, investigative procedures, escalation criteria, incident playbooks, and shift-turnover practices
• Partner with threat analysts and engineering personnel to identify telemetry gaps, detection gaps, false positives, and opportunities for improved enrichment or automation
• Mentor junior analysts, support analyst qualification and exercises, and perform quality review of investigations and case documentation
• Translate incident lessons learned into improved detections, procedures, training, and defensive recommendations

Requirements:

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum six (6) years of relevant experience in addition to education level
• Significant hands-on experience conducting cybersecurity investigations and incident response in enterprise environments.
• Strong knowledge of network and host-based investigation, common adversary tactics, techniques, and procedures, and the MITRE ATT&CK framework
• Experience developing or improving SOC procedures, incident playbooks, runbooks, or analyst training materials
• Experience serving as an escalation point, technical lead, or mentor for cyber defense analysts
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled