Cyber Investigator Jobs (NOW HIRING)

Job Description:

We are seeking a highly skilled Lead Cyber Mission Threat Analyst to serve as the senior technical authority for cyber threat detection, threat hunting, digital forensics, and incident response supporting critical U.S. Navy cybersecurity operations. As designated Key Personnel, this individual will lead proactive cyber defense activities designed to identify, investigate, and mitigate advanced threats targeting enterprise and mission systems.

This role is ideal for an experienced cyber operations professional with a background in Security Operations Centers (SOC), incident response, threat intelligence, or digital forensics who enjoys solving complex cybersecurity challenges in support of national defense missions.

Responsibilities include:

The Lead Cyber Mission Threat Analyst provides advanced technical leadership across cyber threat hunting, enterprise monitoring, incident investigation, forensic analysis, and operational cyber defense. Working alongside Government cybersecurity professionals, this individual identifies indicators of compromise (IOCs), analyzes adversary tactics, conducts complex investigations, and develops actionable recommendations to strengthen the Navy's cybersecurity posture.

The successful candidate will possess deep knowledge of enterprise networking, modern cyber threats, digital forensics, malware analysis, and Security Operations Center (SOC) operations while serving as a trusted advisor during cyber incidents and mission-impact assessments.

• Serve as the senior technical authority for cyber threat analysis and operational cyber defense.
• Plan, coordinate, and execute proactive enterprise threat hunting missions.
• Conduct advanced network-based and host-based forensic investigations.
• Analyze: Security events, Indicators of Compromise (IOCs), Malicious activity, Suspicious behaviors, and Intrusion attempts
• Perform root cause analysis of cybersecurity incidents.
• Assess operational impacts of cyber events affecting mission systems.
• Conduct system critical path analysis supporting enterprise cybersecurity.
• Evaluate complex enterprise environments including: Routing and switching infrastructure, Firewalls, Proxy servers, Load balancers, Endpoint security platforms
• Develop technical findings and investigative reports.
• Recommend containment, remediation, and long-term mitigation strategies.
• Coordinate closely with Government cybersecurity personnel during incident response activities.
• Support continuous monitoring and cybersecurity compliance activities.
• Assist in improving enterprise detection capabilities and threat hunting methodologies.
• Provide technical expertise during cyber investigations and operational planning.

Here’s what you need (Required Qualifications):

• Minimum 8 years of experience supporting the operation and sustainment of major Department of Defense systems.
• Demonstrated experience as either: Security Operations Center (SOC) Analyst, or Incident Responder supporting DoD or comparable enterprise environments.
• Experience planning and executing proactive threat hunting operations.
• Experience performing: Network traffic analysis, Host-based forensic analysis, Log correlation, and Security event investigation
• Strong understanding of enterprise network architecture including: Routing, Switching, Firewalls, Proxy technologies, and Load balancing
• Interim or Active Top Secret Security Clearance.
• DoD 8570/8140 certification(s)

Bonus Points If You Have (Desired Qualifications):

• Experience supporting Navy Cyber Defense Operations.
• Experience with SIEM platforms such as Splunk, Elastic, Microsoft Sentinel, QRadar, or ArcSight.
• Experience with Endpoint Detection & Response (EDR) solutions such as CrowdStrike, Microsoft Defender, or Carbon Black.
• Experience with MITRE ATT&CK Framework mapping.
• Malware analysis experience.
• Threat intelligence platform experience.
• Digital forensic tool expertise (EnCase, FTK, Velociraptor, Autopsy, Volatility, etc.).
• Experience supporting RMF continuous monitoring programs.
• GIAC certifications (GCIA, GCIH, GCFA, GNFA, GCFE) or CISSP.

Security Clearance:

• Interim or Active Top Secret Security Clearance

Education:

• Bachelor's degree in Project Management, Business, Engineering, Computer Science, Political Science, Human Resources, or a closely related field desired.