Cyber Network Defense Analyst (CNDA) IV – Cloud Forensics
Tasks
- Conduct forensic acquisition and analysis
- Correlate cloud telemetry and network evidence
- Develop automated detection logic
- Improve incident response procedures
- Investigate identity and credential abuse incidents
- Perform threat hunting
- Reconstruct attacker timelines
- Triage alerts and assess risk
- Write technical and executive reports
Perks/Benefits
Skills/Tech-stack
AWS | AWS CloudTrail | AWS GuardDuty | Activity logs | Artifact analysis | Azure AD | Azure Activity Logs | Azure Resource | Azure Resource Manager | Bash | Cloud Forensics | Cloud telemetry | CloudFormation | Digital forensics | Docker | Evidence acquisition | Flow Logs | GCP | GCP Chronicle | GCP Logs | Hybrid Infrastructure | IaaS | Identity Security | Incident Response | JavaScript | Kubernetes | MITRE ATT and CK | MITRE ATT and CK for Cloud | Microsoft 365 | Microsoft Defender | Microsoft Sentinel | PaaS | Powershell | Python | Resource manager | SaaS | Terraform | Threat hunting | VPC Flow Logs | VPC flow
Education
Related jobs
-
Tier III Analyst/Threat Hunter USD 110K-166KCause analysis | Detection and Response | Detection engineering | Digital forensics | Endpoint Detection and ResponseComprehensive health coverage | Federal holidays off | Flexible PTO | Professional development support | Remote workSenior-level Full TimeWashington, D.C. Metro - hybrid/remote R11h ago
-
Associate, Vulnerability Assessment USD 53K-92KAWS | Bash | Burp Suite | CCSK | CIS BenchmarkCertification and training reimbursement | Comprehensive insurance options | Digital mental health and wellbeing support membership | Flexible time off | Flexible work modelMid-level Full TimeUnited States14h ago
-
Information Security Analyst USD 95K-130KAccess Control | Authentication | Bash | Certificate management | Encryption401k | Employee discounts | Health, dental, vision coverage | Life insurance | Paid HolidaysMid-level Full TimeHawthorne, CA14h ago
-
Cybersecurity Analyst (Intrusion Analyst) USD 100K-200KC# | C++ | Computer Network Defense | Computer network | Incident Response401k company match | Dental insurance | Employer Paid Long-term Disability | Employer Paid Short-term Disability | Employer-paid life insuranceSenior-level Full TimeSan Antonio, TX, US16h ago
-
Security Operations Analyst USD 70K-106KContinuous Monitoring | Controls evaluation | Detection engineering | Incident Response | Log AnalysisEntry-level Full TimeWashington DC16h ago
-
IT Cybersecurity Analyst USD 75K-95KCause analysis | Cybersecurity | Endpoint protection | Incident Response | Information security401k matching | Dental insurance | Life insurance | Long-term disability | Medical insuranceMid-level Full TimeDallas, Texas, United States19h ago
-
Microsoft Teams | Power BI | Python | SQL | SharePointHelp desk support | User trainingEntry-level ContractLansing, United States22h ago
-
Alerting | Automation | Detection engineering | Incident Response | Log Analysis100% onsite | Public trust clearance requiredSenior-level ContractWashington, United States23h ago
-
Cyber Data Scientist USD 132K-219KAWS Elastic MapReduce | Amazon SageMaker | Amazon Web Services | Artificial Intelligence | Assessment and Authorization401k match | Dental insurance | Disability insurance | Flexible spending account | Health savings accountSenior-level Full TimeChantilly, US-VA, US1d ago
-
AWS CloudTrail | AWS GuardDuty | AWS IAM | Activity logs | Azure Activity LogsOnsite as required | Remote work | TS SCI clearance support | Veteran-owned companySenior-level Full TimeArlington, VA, USA, 222031d ago
-
Access Control | Active Directory | Anomaly Detection | Anti-virus | Business Continuity401k program | Employee assistance program | Flexible spending accounts | Health dental prescription vision benefits | Hotel car and cruise discountsSenior-level Full TimeFort Worth, TX, US1d ago
-
Analyst, OT Cybersecurity, 1 USD 67K-109KAccess Controls | Active Directory | Change Management | Cyber Incident Forensics | Cyber incidentDiscount programs | Flexible spending accounts | Paid family leave | Paid parental leaveSenior-level Full TimeMiddletown, IA, US, 526381d ago
-
Cybersecurity & IoT Research Analyst USD 69K-118K800-53 | ATO | AWS | Access Control | C++Hybrid work | Secret clearance supportEntry-level Full TimeTysons, VA, United States1d ago
-
IT Security Analyst, Tier III USD 112K-155KCapture analysis | Cybersecurity | DNS analysis | Data correlation | Disk image analysisSenior-level Full TimeWilmington, DE, United States1d ago
-
Cyber Data Analyst USD 86K-138KAnomaly Detection | Automation | Dashboard Development | Data Analysis | Data CleansingMid-level Full TimeArlington, VA, United States1d ago
-
Cybersecurity Metrics and Reporting Lead USD 105K-161KAccess Management | Data Governance | Data Modeling | Data integration | EDRDental insurance | Disability insurance | Employee assistance program | Flexible spending account | Flexible vacation and sick leaveSenior-level Full TimeTEX01 - Houston, Texas (TEX01), United …1d ago
-
ACAS | Assessment and Authorization | Audit Reduction | Configuration Management | Continuous MonitoringMid-level Full TimeUSA - Berkeley, MO, United States1d ago
-
Cybersecurity Metrics and Reporting Lead USD 105K-161KAccess Management | Cybersecurity metrics | Dashboarding | Data Modeling | Data QualityDental insurance | Employee assistance program | Flexible paid vacation and sick leave | Flexible spending account | Generous time offSenior-level Full TimeTEX01 - Houston, Texas (TEX01), United …1d ago
-
GPS - Incident Response Analyst - Associate USD 60K-124K800-171 | CMMC | Chain of Custody | Cloud Security | Cloud security conceptsFlexible vacation policy | Hybrid work model | Paid Holidays | Paid time offNone Full TimeAtlanta, GA, US, 30308 R1d ago
-
Assessment and Authorization | Configuration Management | Continuous Monitoring | Continuous Vetting | CybersecurityDisability insurance | Flexible spending accounts | Health insurance | Health savings accounts | Life insuranceMid-level Full TimeUSA - Berkeley, MO, United States1d ago
-
Identity and Access Management, Consultant USD 90K-120KAccess Control | Access Management | Active Directory | Ansible | AutomationHybrid work | In-office two days per weekMid-level Full TimeEl Dorado Hills, CA, United States1d ago
-
Lead Cyber Threat Analyst USD 96K-140KActor Profiling | Application Security | Cloud Security | Common Vulnerabilities and Exposures | Common Vulnerability Scoring System24 7 emergency coverage rotation | Continuous training and awarenessSenior-level Full TimeLas Vegas, NV, United States1d ago
-
IT Security Analyst USD 100K-215KAlert triage | Cause analysis | Cloud Security | Cloud apps | Compliance ManagementMid-level Full TimeUnited States1d ago
-
Cybersecurity Analyst (5690) USD 110K-138KAWS | Azure | Cloud Security | Data Protection | DevSecOps401k match | Dental insurance | Dependent care | Employee Assistance and Wellness Programs | Flexible work arrangementsMid-level Full TimeAlbany, GA1d ago
-
Field Service Analyst USD 62K-132KHTML | Intelligence operations | Java | Law Enforcement Missions | Law enforcementTravel opportunities | Worldwide collaborationMid-level Full TimeCharlottesville, VA, United States1d ago