Jobs at Defianx

Designs, develops, integrates, evaluates, and maintains AI and machine learning capabilities for NATO operational requirements. Responsibilities include generative AI, NLP, predictive analytics, model training, validation, deployment, monitoring, API and pipeline development, lifecycle management, responsible AI, and collaboration with technical and operational teams.

Provides secure Communications and Information Systems support across cybersecurity architecture, engineering, integration, risk management, and capability development. Responsibilities include assessing cybersecurity requirements, vulnerabilities, threats, controls, and residual risks; addressing identity, network, endpoint, cloud, application, and data security; reviewing designs; supporting secure interoperability; and developing risk assessments and technical documentation. Coordinates with NATO security stakeholders and technical delivery teams.

Designs, implements, integrates, secures, and optimizes cybersecurity technologies across cloud, on-premises, hybrid, and multi-vendor environments. Leads security tool integration and automation using scripts, APIs, connectors, and orchestration workflows. Supports security architecture reviews, technology evaluations, incident response, security operations, troubleshooting, and continuous improvement. Collaborates with engineering, operations, development, administration, and customer stakeholders to improve cyber defense capabilities and resilience.

Monitors security events in a 24x7 SOC, triages alerts, investigates suspicious activity, analyzes logs and endpoint data, documents findings, creates incident tickets, collects initial evidence, and escalates confirmed threats. Requires cybersecurity fundamentals, familiarity with SIEM and EDR tools, strong written communication, and the ability to maintain focus during high alert volumes.

Leads advanced SOC investigations, incident response, threat hunting, detection engineering, and cyber defense efforts. Investigates sophisticated threats including nation-state activity, ransomware, and enterprise compromises across networks, endpoints, cloud, and identity systems. Develops investigative strategies, performs root-cause analysis, mentors junior analysts, coordinates major incident response, and improves SOC operations and detection capabilities.

Conduct digital forensic investigations involving computers, servers, mobile devices, cloud environments, virtual systems, and storage media. Collect and preserve evidence, maintain chain of custody, reconstruct incident timelines, recover deleted artifacts, identify attacker activity, and support ransomware, insider threat, fraud, intellectual property theft, and breach investigations. Produce defensible reports for executive, legal, regulatory, and law enforcement review.

Conducts advanced cybersecurity investigations and incident response within a Security Operations Center. Responsibilities include threat hunting, malware triage, forensic review, log analysis, threat intelligence correlation, and technical response coordination. The analyst leads moderate-severity incidents, guides Tier 1 analysts, and improves detection engineering through alert-rule refinement and monitoring-content development. The role requires expertise in SIEM, EDR, network and cloud security, attack frameworks, incident response, and digital evidence collection.