Cyber Defense Analyst

Persistent Systems•Clearfield, IA

1d•Onsite

About The Position

Persistent Systems is seeking a Cyber Defense Analyst to join our growing team. As a Cyber Defense Analyst, you will be a member of the Security Operations Center (SOC) team supporting a Department of Defense program of record. The position will be based in Clearfield, UT. This Cyber Defense Analyst will possess strong core competencies in security monitoring, log analysis, and incident detection and response. Duties will include auditing system logs, monitoring security information and event management (SIEM) tools for potential threats, coordinating compliance and vulnerability assessments, and supporting incident response activities. This individual will play a pivotal role in maintaining the security posture of mission-critical systems through continuous monitoring, threat detection, and rapid response to security events.

Requirements

Four or more years of hands-on experience in security operations, SOC analysis, incident response, or cybersecurity monitoring, or two years of experience and a degree in a related field
Certification as required by DoD 8140 for the Cyber Defense Analyst role (e.g. Security+, CEH(P), PenTest+)
Demonstrated experience with log analysis, security event correlation, and identifying indicators of compromise
Working knowledge of SIEM platforms and security monitoring tools
Understanding of common attack vectors, malware behavior, and cyber threat intelligence concepts
Familiarity with network protocols, TCP/IP fundamentals, and basic network security concepts
Strong analytical and problem-solving skills with attention to detail
Excellent written and verbal communication skills for documenting findings and reporting security incidents
Ability to work scheduled shifts including potential evening, weekend, or on-call rotation coverage
Must be available to travel up to 25% of the time
Currently hold or have the ability to obtain United States Secret security clearance

Nice To Haves

Bachelor's or higher degree in Cybersecurity, Computer Science, or related technical field
Additional advanced certifications such as GCIA, CFR, or GICSP
Four or more years of experience working with DoD organizations or defense contractors in SOC or cyber defense roles
Deep knowledge of DoD cybersecurity policies, RMF continuous monitoring requirements, and incident response procedures
Hands-on experience with enterprise logging and monitoring platforms
Proficiency with threat intelligence platforms and frameworks such as MITRE ATT&CK, STIX/TAXII, or threat feeds
Experience with network traffic analysis tools and packet analysis
Familiarity with endpoint detection and response (EDR) tools and host-based forensics
Understanding of vulnerability management processes and ability to interpret vulnerability scan results
Scripting or automation skills (Python, PowerShell, Bash) for analysis automation
Knowledge of the unique security challenges of tactical network operations

Responsibilities

Monitor SIEM platform and analyze system logs to identify security events, anomalies, and indicators of compromise
Investigate security alerts to determine validity, scope, and impact, escalating confirmed incidents appropriately
Perform incident response triage, investigation, and documentation according to established playbooks
Coordinate with the ISSM to conduct vulnerability scans, risk assessments, and compliance reviews
Maintain and audit system access documentation to enforce authorization procedures and least privilege
Track security trends and emerging threats to provide actionable intelligence for improving defensive posture
Collaborate with security engineers to tune detection rules, implement controls, and improve monitoring coverage
Create and maintain security playbooks, participate in tabletop exercises, and support continuous monitoring activities