Cyber Engineer/Analyst

MorphWorks•McLean, VA

69d•$95,000 - $115,000

About The Position

The Intermediate Cyber Solution Engineer bridges tactical operations and strategic defense. The role handles escalations while moving beyond reactive monitoring into proactive threat hunting and process codification. The engineer mentors junior staff and translates technical findings into actionable playbooks.

Requirements

3–6 years of progressive cybersecurity experience.
Advanced Linux, Unix, and Windows troubleshooting; SIEM/SOAR querying; and MITRE ATT&CK framework mapping.
Advanced network troubleshooting.
Experience with log analysis and log parsing.
Previous experience in customer-facing roles.
Advanced knowledge of cybersecurity principles and practices.
Demonstrated ability to use LLMs for self-research and troubleshooting while maintaining a “trust but verify” mindset.
Bachelor’s degree in a STEM field, or 4+ years of relevant military experience (e.g., MOS 25D or 17C) or intensive technical experience in SysAdmin/NetAdmin roles.
GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), or CompTIA CySA+ certification.

Nice To Haves

Basic Python scripting.
Experience threat hunting.
Network administration experience.
Experience interacting with LogScale, Zeek, and/or Suricata.

Responsibilities

Serve as the subject matter expert for complex NDR alerts requiring deeper investigation than associate-level staff can provide.
Conduct quarterly Compromise Assessments by analyzing historical network metadata to find dormant threats.
Author runbooks and playbooks that turn successful incident resolutions into repeatable, automated team processes.
Perform detailed log analysis and parsing to identify patterns of malicious behavior.
Mentor junior staff and translate technical findings into actionable playbooks.