Senior Cyber Defense Analyst

SOSi • Halawa, HI

8h • $110,290 - $148,891

About The Position

SOSi is hiring a Senior Cyber Defense Analyst Lead for its INDOPACOM Network Security Operations Center. The position leads cyber defense operations across multi-enclave coalition environments and supports classified, mission-critical operations. The analyst serves as the senior analyst and shift lead, coordinating monitoring, detection, threat hunting, incident response, and operational reporting. The role works with analysts, engineers, operations teams, Government stakeholders, and mission partners to improve detection and response processes, including AI-assisted workflows.

Requirements

• Active in-scope Top Secret/SCI clearance.
• DoD 8140 / 8570 IAT Level II certification required within 180 days of hire, such as Security+ CE, CySA+, GSEC, CCNA Security, or equivalent.
• At least 5 years of SOC, CSSP, Defensive Cyberspace Operations, or cyber defense experience, including incident response and threat hunting.
• Experience serving as a senior analyst, shift lead, incident lead, or escalation point in a SOC or enterprise cyber defense environment.
• Strong understanding of adversary TTPs, MITRE ATT&CK, malware analysis fundamentals, cyber kill chain concepts, and advanced detection and response techniques.
• Hands-on experience with SIEM, EDR, SOAR, packet capture and analysis tools, and enterprise monitoring platforms such as Splunk, Elastic, Defender, Wireshark, Zeek, ServiceNow, or similar tools.
• Ability to coordinate cross-functional response efforts among analysts, engineers, operations teams, Government stakeholders, and mission partners.
• Strong written and verbal communication skills, including briefing technical findings, incident status, operational risk, and recommended actions to technical and non-technical audiences.
• Flexibility to support 24/7/365 operations, including rotating shifts, nights, weekends, holidays, on-call support, and surge coverage.

Nice To Haves

• Advanced certifications such as GCIA, GCIH, GDAT, GCTI, CISSP, CASP+, or equivalent.
• Experience supporting DISA, CSSP, TNCC, INDOPACOM, coalition, or military cyber defense environments.
• Prior Tier 2/Tier 3 SOC analyst, shift lead, incident commander, battle captain, or major incident coordination experience.
• Experience with AI/ML-assisted SOC platforms, automation pipelines, SOAR workflows, and operational analytics platforms.
• Experience building, maturing, or refining SOC workflows, CONOPS, SOPs, escalation procedures, dashboards, and reporting products.
• Experience with Mavin, Power BI, JIRA, ServiceNow, Elastic, Splunk, Microsoft Defender, Zeek, Wireshark, or similar enterprise platforms.

Responsibilities

• Serve as senior analyst and shift lead, directing monitoring priorities, triage, threat hunting, and incident investigations.
• Coordinate shift-level cyber defense responses to alerts, incidents, outages, and mission-impacting events, escalating as needed.
• Validate, adjudicate, and prioritize escalated detections from AI-assisted SOC tools and enterprise monitoring platforms.
• Lead initial incident triage and support containment, remediation, evidence preservation, reporting, and shift handoffs.
• Mentor junior and mid-level analysts in detection analysis, threat hunting, incident response, documentation, and operational practices.
• Liaise between analysts, DCAI engineers, detection engineering, NetOps, SysOps, and mission partners to refine detections, SOAR playbooks, AI-assisted workflows, and response procedures.
• Conduct threat hunting using adversary TTPs, threat intelligence, anomaly detection, and mission-specific risk indicators.
• Document incidents, investigations, shift notes, case updates, and lessons learned according to SOPs, CSSP reporting requirements, and escalation timelines.
• Support red/blue team events, tabletop exercises, operational drills, and after-action reviews.
• Provide shift updates, incident summaries, and operational reporting to leadership, Government stakeholders, and mission partners.
• Maintain awareness of enterprise cyber, network, system, and mission environments to support detection, correlation, and mission-impact assessment.
• Support compliance with RMF, CSSP, DoD 8140, SOPs, and accreditation requirements for AI-augmented cyber defense and incident response.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed