The Role
Monitors and investigates cybersecurity alerts and incidents across enterprise and mission systems. Performs threat hunting, root-cause analysis, vulnerability assessments, incident response, and remediation support. Correlates data from SIEM, EDR, IDS/IPS, firewalls, and other security platforms; develops threat intelligence reports; documents findings; supports RMF and compliance activities; and collaborates with infrastructure and security teams.
Summary Generated by Built In
Position Title: Cyber Defense Analyst
Summary The Cyber Defense Analyst monitors, analyzes, and responds to cybersecurity threats affecting organizational networks, systems, and data. The position supports Security Operations Center (SOC) activities, incident response, vulnerability management, threat hunting, and cyber defense operations to protect enterprise and mission systems.
Key Responsibilities
Monitor security tools, alerts, and event logs for indicators of compromise.
Investigate and analyze suspected cyber incidents.
Perform threat hunting and root-cause analysis.
Correlate data from SIEM, EDR, IDS/IPS, firewalls, and other security platforms.
Support incident response activities, containment, eradication, and recovery.
Conduct vulnerability assessments and assist with remediation efforts.
Develop cyber threat intelligence reports and brief leadership.
Document findings, recommendations, and lessons learned.
Support Risk Management Framework (RMF) and compliance activities.
Collaborate with system administrators, network engineers, and security teams.
Required Qualifications
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field.
3+ years of cybersecurity or SOC experience.
Active Secret clearance
Experience with SIEM tools (Splunk, Sentinel, ArcSight, QRadar).
Experience with EDR tools (CrowdStrike, Defender, SentinelOne).
Knowledge of Windows, Linux, networking, and cloud environments.
Preferred Certifications
Security+
CySA+
CISSP
GCIH
GCIA
CASP+/SecurityX
CEH
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
- 3+ years of cybersecurity or SOC experience
- Active Secret clearance
- Experience with SIEM tools, including Splunk, Sentinel, ArcSight, or QRadar
- Experience with EDR tools, including CrowdStrike, Defender, or SentinelOne
- Knowledge of Windows, Linux, networking, and cloud environments
- Security+ certification
- CySA+ certification
- CISSP certification
- GCIH certification
- GCIA certification
- CASP+ or SecurityX certification
- CEH certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Caelum Research Corporation is an SBA-certified HUBZone and woman-owned small business established in 1987. The company provides a broad range of information technology (IT) solutions, systems engineering, software development, data analytics, cybersecurity, and program management services. Caelum serves various U.S. federal government agencies, including the Department of Defense (DoD) and NASA, as well as commercial clients, delivering innovative solutions for mission-critical requirements.
