Cybersecurity Operations Analyst

The Role

This senior-level position leads technical response actions during complex cybersecurity incidents, conducting host, server, network, and memory forensic analysis alongside malware investigation and threat attribution. The analyst builds incident timelines and reports, develops scripts and tools for data collection, and coordinates with cybersecurity, counterintelligence, and law-enforcement partners in a mission-operations environment.

Skills & Experience

Candidates must hold an active TS/SCI clearance and meet DoD 8140/8570 IAT Level II and CSSP Incident Responder certification requirements. A bachelor’s degree or six years of relevant experience is required, covering incident response, digital forensics, and malware analysis. Preferred qualifications include a master’s degree, IAT Level III certification, and malware reverse-engineering or advanced scripting skills.

Who It Suits

This role suits an experienced DFIR professional with an active TS/SCI clearance who thrives in high-tempo, mission-critical government environments. Those with a background in defensive cyber operations and strong technical writing skills who are comfortable briefing senior stakeholders and working across intelligence and law-enforcement communities will excel here.