Lead cyber intelligence systems engineering, architecture, integration, and operational support for defense and intelligence missions.
Compensation
The salary range for this role is 145,600 USD - 276,800 USD.
Responsibilities
Advance research, innovation, and technical delivery in cyber intelligence to enable defensive cyber operations (DCO), secure weapons systems, and analyze adversarial threat vectors for government sponsors
Hands‑on technical or engineering oversight in adversary emulation, threat hunting, cyber analytics, malware analysis, or reverse engineering
Serve as the senior technical authority in leading the architecture, end‑to‑end systems integration, and optimization of complex packet‑based hardware and software platforms
Architect, modernize, and optimize complex mission systems utilizing COTS/GOTS; drive automation initiatives to enhance system reliability under tight timelines; provide top‑tier troubleshooting for lifecycle sustainment
Generate, analyze, and mature Concept of Operation (CONOP) designs which will be a blueprint for operational missions, mission support, and/or mission sustainment
Requirements
Bachelor's or Advanced degree in Science, Technology, Engineering or Mathematics (STEM)
Nice to have: Telecommunications standards and processing techniques
Nice to have: Enterprise telecommunication network design
The Consultant, Reactive Services is an individual contributor role within Unit 42, responsible for supporting digital forensics and incident response (DFIR) engagements across a wide range of client environments throughout Latin America.
Responsibilities
Support and execute digital forensics and incident response investigations across enterprise environments.
Conduct forensic analysis of endpoints, systems, logs, and cloud environments to identify attacker activity and scope of compromise.
Assist with host, network, and cloud investigations during active security incidents.
Perform forensic acquisition and preservation of evidence following industry best practices and chain-of-custody procedures.
Utilize industry-standard DFIR tools and methodologies to investigate malicious activity and support containment efforts.
Requirements
Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience
Nice to have: Experience supporting enterprise incident response investigations across cloud or hybrid environments
Nice to have: Familiarity with MITRE ATT&CK framework
Provide CSOC Tier 3 services including malware analysis, forensic artifact handling, incident response coordination, and development of custom scripts and tools.
Compensation
The proposed salary range for this position is: $75,200-$158,100
Responsibilities
Coordinate and implement tasks during cyber security incident response
Build and document response activities
Collaborate with security and law enforcement authorities
Develop and update reports in JIMS and ICMS
Maintain custom scripts and tools for data collection and analysis
You are the senior technical authority in the Security Operations Center, leading investigation and response for the organization's most complex and critical security incidents. You act as technical lead or incident commander during major events, perform advanced forensics and malware analysis, and lead proactive threat hunting to find threats that evade existing controls.
Locations (2)
Irving, Texas, United States
Dallas, Texas, United States
Responsibilities
Lead complex and critical incident response
Act as technical lead or incident commander for critical, high-impact incidents such as ransomware, business email compromise, data exfiltration, and insider threats
Direct containment, eradication, and recovery across multiple teams, making real-time technical decisions within delegated authority
Perform advanced forensic analysis of endpoints, memory, and cloud environments to establish root cause, attacker dwell time, and full scope of compromise
Provide clear incident briefings and status updates to your Manager, IT Security leadership, and stakeholders such as Legal, Privacy, and Communications
Participates in 24x7x365 monitoring DLA's SIEM and other cybersecurity monitoring tools in an effort to detect and respond to cybersecurity threats within DLA's Enterprise Network Environment.
Compensation
Salary: $120,000-$125,000.
Responsibilities
Participates in 24x7x365 monitoring DLA's SIEM and other cybersecurity monitoring tools
Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity
Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats
Reviews logged events for trends that are indicative of attack or compromise within the environment
Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment
Requirements
Bachelor's degree in Computer Science or related field
Participates in 24x7x365 monitoring DLA's SIEM and other cybersecurity monitoring tools in an effort to detect and respond to cybersecurity threats within DLA's Enterprise Network Environment.
Compensation
Salary: $120,000-$125,000.
Responsibilities
Participates in 24x7x365 monitoring DLA's SIEM and other cybersecurity monitoring tools in an effort to detect and respond to cybersecurity threats within DLA's Enterprise Network Environment.
Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats.
Reviews logged events for trends that are indicative of attack or compromise within the environment.
Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment.
As our Principal SOC Analyst in Australia, you're the most senior technical voice on the APAC SOC floor, working Monday to Friday. You'll take ownership of the hardest intrusions, turn what the floor sees every day into durable detection and product improvements, and raise the bar for every analyst around you.
Compensation
Compensation Range: $180,000 to $215,000 AUD base plus bonus and equity.
Responsibilities
Own complex, multi-host intrusions end to end, from triage through forensic timelining, root cause and remediation, across endpoint, identity (Microsoft 365 / Google Workspace) and SIEM telemetry
Act as the SOC's technical partner to Product, Product Research and DE&TH: turn recurring floor pain points into lasting detection, suppression and product fixes rather than workarounds
Perform advanced static and dynamic malware analysis, research emerging tradecraft, and publish findings through Huntress content
Find repeatable investigation patterns and toil, then design, build and maintain both automation and human-led agentic workflows with Workflow Engine owners, Product and Engineering, with inline QC/QA built in from the start
Own quality on the floor: grade AI agent and analyst output, trace misses to their root cause and fix them at the source, and act as final technical reviewer on detection tuning, suppression decisions and high-impact incident reports
Provide CSOC Tier 3 services including 24x7x365 coordination, execution, and implementation of incident response measures, malware analysis, and forensic artifact handling.
Compensation
The proposed salary range for this position is: $75,200-$158,100
Responsibilities
Coordinate and implement incident response activities for cyber security incidents
Coordinate with Security and Installations Directorate (SI) Office of Counterintelligence (SIC) and Insider Threat Office (SIII)
Collaborate with authorities in the production of security incident reports
Categorize incidents and events
De-conflict blue / red team activity with open incidents
Cyber Defensive AnalystNewHII's Mission Technologies division · Fort Meade, US
Computer Network Defense Analyst (EAIRS)NewHorizon Industries · Columbus, US
CSOS Tier 3 Analyst, Shift 3NewCaci · St. Louis, US