Defensive Security Analyst-Washington, DC

A SpecterOps consultant placed full time at a client's site in Washington, DC, where the analyst works alongside client staff to engineer, manage and monitor the systems behind the client's security operations centre. The work includes forensic examination of hosts and network traffic, log review and malware triage for threat hunts, preserving evidence such as logs, memory captures and disk images during incidents, running the SIEM, and writing reports and briefings for technical and executive readers.

The client wants hands-on SOC experience, SIEM administration, familiarity with AWS or Azure, and scripting in PowerShell, Python or Bash; penetration testing experience is a plus. A current TS/SCI clearance, or eligibility for one, is required. Hours are weekday business hours on site, with on-call work during urgent incidents.