Senior Cyber Defense Analyst

🛡️Senior Cyber Defense Analyst Lead

Shape the future of cyber defense at the operational edge. As the Senior Cyber Defense Analyst Lead within SOSi's INDOPACOM Network Security Operations Center, you'll orchestrate next-generation cyber operations across multi-enclave coalition environments powered by advanced DaaS private cloud technologies.

Leveraging AI-enhanced threat detection, real-time analytics, and mission-driven decision-making, you'll lead elite cyber defenders in identifying, disrupting, and neutralizing emerging threats before they impact operations. Working at the intersection of cyber innovation, detection engineering, and mission execution, you'll help safeguard critical warfighter capabilities in one of the world's most dynamic security environments.

🛡️Lead the defense. ⚡Accelerate the response. 🔒Secure the mission.

Essential Job Duties

• Serve as the senior analyst and shift lead for assigned operations, providing direction on monitoring priorities, triage, threat hunting, and incident investigation activities.

• Coordinate shift-level cyber defense response activities during alerts, incidents, outages, and mission-impacting events, escalating to the Incident Response Lead, DCO Lead, or INSOC leadership as required.

• Validate, adjudicate, and prioritize escalated detections from AI-assisted SOC tools, SIEM, EDR, SOAR, and enterprise monitoring platforms.

• Lead initial incident triage and support containment, remediation, evidence preservation, reporting, and handoff activities across shift transitions.

• Mentor junior and mid-level analysts in detection analysis, threat hunting, incident response procedures, documentation standards, and operational best practices.

• Serve as the shift-level liaison between analysts, DCAI engineers, detection engineering, NetOps, SysOps, and mission partners to refine detections, SOAR playbooks, AI-assisted workflows, and response procedures.

• Conduct threat hunting based on adversary tactics, techniques, and procedures (TTPs), threat intelligence, anomaly detection, and mission-specific risk indicators.

• Ensure incidents, investigations, shift notes, case updates, and lessons learned are documented accurately in accordance with SOPs, CSSP reporting requirements, and escalation timelines.

• Support red/blue team events, tabletop exercises, operational drills, and after-action reviews to validate analyst readiness and improve shift procedures.

• Provide clear verbal and written shift updates, incident summaries, and operational reporting to leadership, Government stakeholders, and external mission partners as required.

• Maintain awareness of enterprise cyber, network, system, and mission environments to support timely detection, correlation, and mission-impact assessment.

• Support compliance with RMF, CSSP, DoD 8140, SOPs, and accreditation requirements for AI-augmented cyber defense and incident response processes.