Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead

Master Level Cyber Defense Analyst/Intrusion Detection Team Shift LeadAn organization is seeking an experienced Master Level Cyber Defense Analyst / Detection Team Shift Lead to support a high-tempo Security Operations Center (SOC) environment. This role combines advanced cyber threat analysis, intrusion detection, threat intelligence, and team leadership responsibilities. The ideal candidate brings experience investigating security events, analyzing network and host-based threats, leveraging SIEM technologies, and leading cybersecurity operations personnel in a mission-critical environment.Key ResponsibilitiesLead and support a team of intrusion detection and cyber defense analysts during daily SOC operations.Identify, analyze, and coordinate remediation efforts for cyber threats and security incidents.Provide actionable intelligence to incident response teams and cybersecurity stakeholders.Assess organizational security posture by correlating cyber threat intelligence with network and system activity.Conduct advanced analysis of intrusion signatures, attack methodologies, tactics, techniques, and procedures (TTPs).Perform investigations involving SIEM data, IDS/IPS alerts, firewall logs, packet captures, and network traffic.Research emerging threats, vulnerabilities, exploits, and adversary techniques.Develop intelligence reports, technical findings, and executive briefings for leadership.Support cyber incident response activities and threat-hunting initiatives.Required QualificationsBachelor's degree and 8+ years of cybersecurity, intrusion detection, or cyber defense experience.Minimum 7 years of experience analyzing security events across IDS/IPS, network, host, and application logging technologies.Minimum 2 years of experience serving as a Cyber Security or Security Operations Center Shift Lead.Experience using Splunk SIEM, including advanced searches and query development.Experience analyzing IDS/IPS events, firewall ACLs, network traffic, packet captures (PCAPs), web server logs, raw log data, and Snort-based intrusion detection events.Experience operating within an enterprise SIEM environment.Written and verbal communication skills with the ability to brief technical and non-technical stakeholders.Required CertificationsCandidates must possess at least one of the following:Certified Information Systems Security Professional (CISSP)Systems Security Certified Practitioner (SSCP)GIAC Certified Intrusion Analyst (GCIA)GIAC Certified Enterprise Defender (GCED)GIAC Certified Perimeter Protection Analyst (GPPA)EC-Council Certified Security Analyst (ECSA)Additionally required:Splunk Fundamentals ISplunk Fundamentals IIPreferred QualificationsThreat hunting and intelligence analysisSecurity Operations Center (SOC) leadershipIncident response supportMalware and adversary researchAdvanced log analysis and correlationGovernment or large enterprise cyber defense experienceWork EnvironmentThis role offers multiple shift options.

The first shift is from 7:00 AM to 3:30 PM. The second shift is from 3:00 PM to 11:30 PM. The night shift operates from 11:00 PM to 7:30 AM and is fully remote.

The day and evening shifts are hybrid, with an option for remote work on Fridays.Interview & Hiring ProcessIf you are selected to move forward, the process includes a virtual video interview where a camera must be on and a valid photo ID must be presented. The hiring process involves an enhanced biometrics ID verification screening and a background check, which includes a review of criminal history and verification of education and employment history from the past seven years.