DigiFlight- Intrusion Analyst 3
Job ID: 08765
Location: Columbia, MD [On-Site]
Employment Type: Contract
Intrusion Analyst 3
Clearance Required: TS/SCI with Full Scope Poly
Location: Onsite – San Antonio, TX
About the Role
Our client is seeking an experienced Intrusion Analyst to support advanced cyber defense and intelligence operations within a secure environment. This role will focus on identifying, analyzing, documenting, and mitigating malicious or unauthorized network activity through the use of cyber intelligence, network defense tools, and metadata analysis.
Key Responsibilities
- Analyze digital network data to identify malicious, suspicious, or unauthorized activity.
- Utilize SIGINT and computer network defense resources to investigate cyber threats and security incidents.
- Analyze metadata collected from communications systems to identify, locate, and track targets.
- Categorize network traffic and activity as benign, suspicious, or malicious.
- Document malicious tactics, techniques, and procedures (TTPs).
- Develop and implement mitigation and response strategies for identified threats.
- Support network-based and host-based cyber analysis activities.
- Produce accurate reporting and intelligence documentation related to cyber threat activity.
- Collaborate with cybersecurity and intelligence teams to support ongoing defense operations.
Required Qualifications
- Active TS/SCI clearance with Full Scope Polygraph.
- Experience in intrusion analysis, cyber threat detection, or network defense operations.
- Strong understanding of network traffic analysis and cybersecurity principles.
- Experience analyzing malicious activity, threat indicators, and attack methodologies.
- Familiarity with SIGINT, metadata analysis, or intelligence-driven cyber operations.
- Experience documenting threat activity, TTPs, and mitigation strategies.
- Strong analytical, troubleshooting, and investigative skills.
- Ability to work effectively within highly secure and mission-critical environments.
Preferred Qualifications
- Experience with host-based and network-based intrusion analysis tools.
- Familiarity with incident response and cyber threat intelligence operations.
- Experience supporting government, defense, or intelligence community environments.
- Knowledge of cybersecurity frameworks, detection methodologies, and secure network operations.