Senior Defensive Cyber Ops Analyst (AI-Driven Detection)

Dark Wolf Solutions, LLC; Town of Ogden (NY); On-site; USD 90,000 - 145,000; Full time

Job summary

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst to perform continuous system monitoring, incident response, and threat detection on‑prem ELK and AWS GovCloud using Splunk. The role emphasizes AI-assisted analysis to accelerate containment and remediation while ensuring DoD security requirements are met.

The position is on‑site at Hill AFB in Ogden, Utah, with responsibilities spanning TTP development, vulnerability handling, and incident documentation, requiring DoD clearance

Qualifications

• 4+ years of relevant cybersecurity experience including SOC/vSOC/CSSP incident response.
• Experience with Splunk Enterprise and ELK Stack for event correlation and threat detection.
• Experience monitoring and analyzing security telemetry in AWS GovCloud.
• Experience with GitLab for source control, CI/CD, and DevSecOps workflows.
• DoD cybersecurity requirements and assessment/authorization activities experience.

Responsibilities

• Active monitoring, detection, and analysis across on-prem ELK and AWS GovCloud (Splunk).
• AI-assisted analysis for triage, anomaly detection, and faster responses.
• Provide vulnerability management recommendations and mitigations.
• Conduct intrusion analysis and improve detection and remediation processes.
• Support Root Cause Analysis and document mitigation efforts.
• Develop DCO tactics, techniques, and procedures (TTPs).
• Identify security discrepancies and respond to incidents.
• Draft briefings, reports, and analyses.
• Participate in customer exercises as needed.
• Comply with BSTG training and policies.

Skills

SOC incident response

AI/ML security tooling awareness

Threat detection & incident analysis

Active monitoring & correlation

Documentation & communication

Education

Bachelor's degree in Computer Science or IT

US Citizenship with Top Secret/SCI clearance

Tools

Splunk Enterprise

ELK Stack

AWS GovCloud

GitLab (CI/CD, DevSecOps)

Job description

Dark Wolf Solutions is seeking a Defensive Cyber Operations Analyst to perform continuous system monitoring, incident response, and threat detection on‑prem ELK and AWS GovCloud using Splunk. The role emphasizes AI-assisted analysis to accelerate containment and remediation while ensuring DoD security requirements are met.

The position is on‑site at Hill AFB in Ogden, Utah, with responsibilities spanning TTP development, vulnerability handling, and incident documentation, requiring DoD clearance