Defensive Cyber Analyst

Tyto Athene, LLC

Defensive Cyber Analyst analyzing cyber incidents for the United States Space Force. Collaborating on cybersecurity monitoring, intrusion detection, and incident response at a federal agency.

Posted 7/24/2026full-timeColorado Springs • Colorado • 🇺🇸 United StatesJunior💰 $100,000 - $115,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Incident Response, Continuous Cybersecurity Monitoring, and the development of DCO Tactics, Techniques, and Procedures (TTPs). Proficient in utilizing various cybersecurity tools and technologies to analyze incidents and enhance operational capabilities.

Highest-signal resume keywords

Cybersecurity Incident ResponseContinuous Cybersecurity MonitoringDCO Tactics, Techniques, and Procedures (TTPs)Active DoD 8570.07-M CertificationExperience with Elastic Stack and Splunk

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Incident AnalysisIntrusion DetectionSecurity Discrepancy IdentificationCybersecurity MonitoringPython ScriptingBash ScriptingIncident ReportingMitigation StrategiesAfter Action ProcessesTool Capability Maximization

Tools & Technologies

Elastic StackKibanaSuricataSplunkSnortWiresharkBro/ZeekTcpdumpEditcapMicrosoft Office 365

Certifications & Qualifications

CEHCySA+GCIHGCIACFRCCNA Cyber OpsCCNA-SecurityGICSPCloud+SCYBER

Industry Keywords

CybersecurityDCOCSSPSpace OperationsDoD TS/SCI Clearance

Tech Stack

Tools & technologies

CloudCyber SecurityPythonSplunkTypeScript

About the role

Key responsibilities & impact

Analyze cyber incidents, correlate incident details and formulate response actions.
Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
Monitor government provided DCO tools and systems.
Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
Participate in development of DCO concept of operations, processes and procedures.
Identify security discrepancies and report security incidents.
Provide expert research and analysis in support of expanding programs and area of responsibility.

Requirements

What you’ll need

Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) "Analyst" or "Incident Responder" certifications: CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA
1-3 years of Cybersecurity/IT experience
Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.
Cybersecurity Service Provider (CSSP) experience is preferred.
Familiarity with Space Operations is highly desired.
Experience with the following tools: Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting.
Active DoD TS/SCI clearance

Benefits

Comp & perks

Health/Dental/Vision
401(k) match
Paid Time Off
STD/LTD/Life Insurance
Referral Bonuses
professional development reimbursement
parental leave