Senior Defensive Cyber Analyst

Piper Companies; Fort Meade (FL); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401(k)

Job summary

Zachary Piper Solutions seeks a Senior Defensive Cyber Analyst for the DISA Defensive Cyber Command Center in Fort Meade, MD. The role is full-time and onsite, focusing on enterprise cyber defense, threat analysis, and security architecture across DoDIN and cloud environments.

Responsibilities include leading incident responses, producing executive briefs, and enhancing monitoring through SIEM tools like Splunk.

Qualifications

• Bachelor's degree or higher in a technical field.
• 8+ years of cybersecurity/defense experience.
• Active TS/SCI clearance.
• DoD 8570 IAT II certification (Security+ CE) or equivalent.
• Additional industry certifications (AWS, Azure, CISSP, PMP, ITIL 4, etc.).
• Experience with LAN/WAN/cloud and large IT systems.
• Ability to produce technical docs and operational plans.
• Experience in joint commands or mission environments.

Responsibilities

• Provide enterprise defensive strategies for DoDIN, including cloud and endpoints.
• Analyze architectures, policies, and data to determine prevention and mitigation strategies.
• Deliver executive-level briefings for senior leadership.
• Conduct cyber situational awareness and improve enterprise visibility.
• Lead security incident responses and post-breach analyses.
• Demonstrate proficiency with detection rules and SIEM (Splunk).
• Engage in proactive threat hunting using network analysis and logs.
• Communicate with technical and non-technical stakeholders.
• Support mission-focused operations in high-visibility settings.
• Develop CONOPS, policies, and implementation plans.
• Provide strategic recommendations on system architecture and integration.

Skills

TS/SCI clearance

Security+ CE

Splunk

Threat hunting

Incident response

SIEM

Network security

Executive briefings

Documentation

Cloud security

Education

Bachelor's degree

Tools

Wireshark

NetFlow

PCAP analysis

Job description

*Active TS/SCI clearance needed for consideration, as well as willingness to sit for a CI Polygraph*

Zachary Piper Solutions is currently seeking a Senior Defensive Cyber Analyst to support the DISA Defensive Cyber Command Center (DCDC) based in Fort Meade, MD. This position is a full-time role that will be fully onsite. This position is critical in safeguarding Department of Defense networks and assets, ensuring robust cybersecurity measures and procedures are maintained. As a Senior Defensive Cyber Analyst, you will play a pivotal role in enterprise cyber defense, threat analysis, security architecture assessment, operational planning, and situational awareness activities supporting the Defense Information Systems Agency (DISA), Department of Warfighting (DoW), and Combatant Commands (COCOMs).

Key Responsibilities:

• Provide holistic enterprise defensive strategies for cybersecurity capabilities implemented within the DoDIN infrastructure, including cloud environments, network boundaries, cross-domain solutions, and endpoint technologies.
• Analyze architectures, technologies, policies, information, and analytical data to determine effective prevention, detection, and mitigation strategies for anomalous activity, vulnerabilities, and operational inefficiencies.
• Prepare and deliver executive-level briefings and cybersecurity assessments for senior leadership, including General Officers and Flag Officers.
• Perform cyber situational awareness activities and provide recommendations to enhance enterprise visibility and defensive capabilities.
• Provide enterprise-wide cybersecurity analysis, threat assessments, countermeasures, and defensive strategies across complex, multi-tiered environments.
• Lead complex security incident responses, from post-breach analysis to threat actor identification, leveraging netflow, PCAP analysis, and security event logs to identify and mitigate lateral movement and escalation activity.
• Demonstrate proficiency in writing and understanding detection rules and utilizing SIEM technologies, including Splunk, for detailed incident analysis and resolution.
• Engage in proactive threat hunting efforts utilizing network traffic analysis, log correlation, netflows, endpoint telemetry, and packet captures.
• Communicate effectively with internal teams, stakeholders, and operational centers to secure on-premises and cloud environments.
• Support mission-focused operations in a fast-paced, high-visibility environment with elevated customer expectations.
• Develop and review technical documentation, Concept of Operations (CONOPS), policies, implementation plans, and training materials.
• Provide strategic recommendations regarding system architectures, operational design, integration planning, and implementation approaches supporting DCDC leadership objectives.

Requirements:

• Bachelor's degree or higher in Information Technology Management, Cybersecurity, Computer Science, or a related technical field.
• Minimum of 8 years of experience supporting cybersecurity, network operations, cyber defense, or related technical environments.
• Active TS/SCI Clearance.
• Current DoD 8570 IAT Level II certification, including Security+ CE or equivalent.
• One additional industry certification such as:
  • Microsoft Certifications (Azure, Data & AI, Modern Workplace, Dynamics 365, etc.)
  • AWS Certification
  • Google Cloud Certification
  • VMware Certification
  • Oracle Certification
  • Cisco Certification
  • ITIL 4 Foundation
  • PMP
  • Agile/Scrum Certification
  • CISSP or equivalent
• Strong understanding of LAN, CAN, WAN, cloud computing, data center technologies, servers, and enterprise communication systems.
• Experience supporting multiple large-scale IT systems and enterprise cybersecurity initiatives.
• Knowledge of Continuous Process Improvement methodologies.
• Experience with Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) technologies.
• Ability to communicate effectively with both technical and non-technical audiences.
• Experience developing, reviewing, and editing technical documentation and operational plans.
• Working knowledge of SAFe and ITIL 4 frameworks.
• Experience operating in Joint Commands, Operations Centers, or similar mission environments.
• Strong understanding of military orders, operational planning, and mission execution processes.
• Proficiency with Microsoft Office Suite, including Word, Excel, Access, and Outlook.
• Demonstrated ability to work independently with minimal supervision.
• Knowledge of policy development and governance processes.

Preferred Qualifications:

• Experience supporting DISA and Department of Defense network environments.
• Experience briefing and engaging with senior executive leadership and military leadership.
• Experience with technical writing and military operational documentation.
• Strong familiarity with cloud security architectures and enterprise cyber defense frameworks.
• Experience supporting large-scale government IT modernization initiatives.

Compensation Includes:

• Salary Range: $150,000 - $180,000 (depending on experience)
• Full Benefits: Medical, Dental, Vision, 401(k), PTO, and Sick Leave as required by law

This job posting opens on 9/14/2026 and will remain open for at least 30 days from the posting date

Keywords: Cybersecurity, Defensive Cyber Operations, DISA, DCDC, Department of Defense, TS/SCI, Security+, Incident Response, Splunk, Splunk SPL, Threat Hunting, Network Security, Security Operations Center, SOC, DoDIN, Cloud Security, SIEM, PCAP Analysis, Wireshark, NetFlow Analysis, Network Forensics, Security Architecture, Cyber Defense, Threat Intelligence, Vulnerability Management, Continuous Monitoring, Security Analytics, Digital Forensics, Intrusion Detection, IDS, IPS, Endpoint Detection and Response, EDR, Security Operations, Risk Assessment, Cloud Computing, IaaS, PaaS, Enterprise Security, Situational Awareness, Military Operations, Joint Operations Center, Cyber Threats, Security Engineering, Security Governance, Compliance Management, Technical Writing, CONOPS, SAFe, ITIL 4, CISSP, AWS, Azure, VMware, Defensive Cyber Analyst.