Citizen with a DoD Top Secret clearanceBachelor's Degree in Cybersecurity, Computer Science, or related fieldMinimum of 8 years of experience in cybersecurity or related IT rolesProven proficiency in Splunk Enterprise Security (required) and Microsoft Sentinel (preferred)Strong understanding of incident response, threat hunting, and vulnerability managementMust hold at least three of the following certifications:GIAC Continuous Monitoring (GMON)GIAC Certified Incident Handler (GCIH)GIAC Certified Forensic Analyst (GCFA)GIAC Certified Intrusion Analyst (GCIA)GIAC Network Forensic Analyst (GNFA)DESIRED QUALIFICATIONSHands-on experience with threat intelligence platforms and malware analysisFamiliarity with scripting and automation toolsStrong interpersonal, communication, and reporting skillsPHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONSFast-paced, secure operations center24/7 rotational shift work (including nights, weekends, and holidays as needed)Working on a computer for long periods of time. ESSENTIAL FUNCTIONSPerform continuous monitoring of enterprise networks using SIEM tools (e.g., Splunk Enterprise Security and Microsoft Sentinel)Analyze and investigate cybersecurity incidents including alerts, vulnerabilities, and breachesConduct forensic analysis and incident handling using validated methodologiesDocument incidents and assessments, and contribute to after-action reports and remediation strategiesAssist in penetration testing and vulnerability assessmentsMaintain and fine-tune security tools including firewalls, IDS/IPS, and data encryption technologiesProvide input to best practices and security policy improvementsSupport real-time cyber defense operations alongside deployable Incident Response Teams (IRTs)Create forensically sound duplicates of evidence, conduct dynamic analysis (timeline, signature, and statistical), and deliver actionable intelligenceQUALIFICATIONSU.S.