Job Summary

• Seeking an Intrusion Analyst to conduct advanced network and protocol analysis to identify, investigate, and respond to sophisticated cyber threats
• This role requires deep expertise in packet-level inspection, protocol analysis, and data interpretation to detect anomalous activity and support mission-critical cybersecurity operations
• The analyst operates in a high-tempo environment leveraging specialized tools and datasets to uncover indicators of compromise and support defensive cyber operations

Primary Responsibilities

• Perform deep packet inspection (DPI) and detailed traffic analysis to identify suspicious or malicious activity
• Analyze raw packet data and hex dumps to extract and interpret underlying protocols and communications
• Conduct signals and protocol analysis to identify anomalies, unauthorized activity, and emerging threats
• Utilize advanced analytic tools and platforms, including Packetswing, DVT (Digital Network Exploitation Verification Tool), WVT (Waveform Visualization Tool), VINTAGEHARVEST, BROADSKY, and XKEYSCORE
• Leverage XKEYSCORE front-end (FP) and metadata processing (MP) schemas to query, analyze, and correlate large-scale datasets
• Investigate network traffic patterns and reconstruct sessions to support threat detection and attribution
• Develop and refine analytic techniques to enhance detection of advanced threats and adversary tactics
• Collaborate with mission partners, analysts, and engineers to support coordinated cyber defense efforts
• Document findings, analytic methodologies, and intelligence assessments

Required Qualifications

• Must have active Top Secret/SCI clearance with Full Scope Polygraph (MD Customer)
• Master’s degree with 6 years of relevant experience, Bachelor’s Degree with 8 years of relevant experience, or Associate's Degree with 10 years of in-depth relevant experience that is clearly related to the position
• Strong experience with network protocols, packet analysis, and traffic inspection
• Ability to analyze hexadecimal data and low-level network communications
• Experience with signals analysis and protocol reverse engineering
• Familiarity with large-scale data analysis tools and mission-specific platforms
• Strong analytical and problem-solving skills in a high-tempo operational environment
• Experience with Packetswing, DVT/WVT, VINTAGEHARVEST, BROADSKY, and XKEYSCORE
• Experience working with front-end and metadata schemas (FP/MP) within analytic platforms
• Background in cyber threat analysis, network exploitation, or signals intelligence (SIGINT)
• Desired Qualifications

• 451/452 training strongly preferred

Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate’s experience and qualifications.