Assists Government lead coordinating teams in preliminary incident response investigations
Interfaces with the customer on-site under Government lead
Determines actions in response to anomalous network activity
Assesses network topology and device configurations; provide security recommendations
Collects network intrusion artifacts (PCAP, domains, URIs, certs) for mitigation
Analyzes malicious network activity to identify weaknesses and methods

🎯 Requirements

BS in CS, Cyber Security, or Computer Engineering; or HS Diploma with 7-9 years of network investigations
5+ years of directly relevant experience in network investigations
In-depth knowledge of TCP/IP protocols
In-depth knowledge of ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS
Substantial knowledge of Splunk (or other SIEMs)
Understanding of MITRE ATT&CK framework

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Operations Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot