Jobs in the United States

25+ jobs

Save this search

Added 24 mins ago
Senior Business Analyst for the Division of Budget and Program Operations (City HAP Program)
City of New York
New York City, NY
…for Program Strategy, you will be assisting in managing the implementation of HPD’s 5 Year Technology Plan for the Office of Housing Access and Stability and other technological…
Added 24 mins ago
Citywide Facility Planner
City of New York
New York City, NY
…on leave from a comparable title (e.g. Administrative Staff Analyst or Administrative Manager) or 4) Parks employees who are reachable on the Administrative Community Relations Specialist…
Added 41 mins ago
HRIS Analyst
Suffolk Construction Company, Inc
Boston, MA
This is an exciting opportunity to play a meaningful role in Suffolk's Oracle HCM Cloud implementation and help shape the future of our HR technology. The HRIS Analyst will support key…
Added 55 mins ago
APS-3: Logistics Analyst Planner
Trinzic
Goose Creek, SC · Charleston, SC
Participate in the execution, direction, evaluation, and implementation of logistical actions in support of the projects/programs between AFSBn-CHS, Program Manager, Deputy Program Manager,…
Added 1 hour ago
Healthcare IT Infrastructure & Clinical Applications Consultant
Deloitte
Kansas City, MO
…ability to share new ideas and collaborate on projects as an Analyst without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Delivery Talent…
Added 1 hour ago
Healthcare IT Infrastructure & Clinical Applications Consultant
Deloitte
Saint Louis, MO
…ability to share new ideas and collaborate on projects as an Analyst without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Delivery Talent…
Added 1 hour ago
ATSU - Data Analyst
A.T. Still University
Kirksville, MO
A.T. Still University is seeking a full-time exempt Data Analyst. The person in this position will participate in the analysis, design, development, organization, storage, security,…
Added 1 hour ago
LC
Senior Policy Analyst
Leon County Government
Tallahassee, FL
- $36.39 to $60.04 USD / hour
…research and analysis on policy development, adoption, and implementation. Assignments also include extensive program evaluation that requires strong analytical skills and the ability to…
Added 1 hour ago
RO Business Analyst
Idaho Division of Human Resources
Boise, ID
The Idaho State Tax Commission is recruiting for a Business Analyst in its Revenue Operations Division to provide system support by managing a team of Tax Automated System Specialists…
Added 1 hour ago
Production Financial Analyst (P2) *HYBRID*
RTX Corporation
huntsville, AL
…self-driven Finance professional to assume the role of Finance Analyst for Domestic Patriot Production programs. The Finance Analyst position (P2) will provide a tremendous growth…
Added 1 hour ago
Systems Administrator - Kiteworks
SitusAMC
Jefferson City, MO
…the Systems Administration job family, responsible for the implementation, administration, and ongoing support of the organization's server and platform infrastructure. This individual is…
Added 1 hour ago
Engineering Tech Analyst
Apex Systems, Inc
Milford, MI
Job Description: Engineering Tech Analyst Location: Milford, Michigan (On-site) Shifts: 1st -- 6AM-4:30PM Start on 1st shift -- 8 weeks to go through training The openings are on the below…
Added 1 hour ago
Entry-Level Cybersecurity Analyst / IT Technician
Cutting Edge Computers
Gaylord, MI
Cutting Edge Computers is looking for a motivated Entry-Level Cybersecurity Analyst / IT Technician. This position combines security monitoring and incident response responsibilities with…
Added 1 hour ago
Sr Analyst, Financial Planning & Analysis
Evolent
Jefferson City, MO
…across the organization, including Operations, Accounting, Implementation, and Sales, and partners with all company stakeholders, including the executive leadership…
Added 1 hour ago
Classified Cybersecurity Analyst - TS/SCI
Northrop Grumman
Aurora, CO
The Northrop Grumman CIDO Classified Solutions team is seeking a Classified Cybersecurity Analyst to support information system lifecycle activities. The selected candidate will be required…
Added 1 hour ago
Senior GRC Information Security Systems Analyst
Dorsey & Whitney
Denver, CO
Join Dorsey's Information Security team as a Senior GRC Information Security Systems Analyst to help safeguard our firm and clients by driving high-impact security initiatives across…
Added 2 hours ago
CC
HEDIS Business Analyst III
Centene Corporation
Cheyenne, WY
- $70,100 to $126,200 USD / year
…reporting, data validation, and issue research. The Business Analyst III translates operational requirements into technical solutions, partners with internal teams and vendors, and helps…
Added 2 hours ago
Financial Affairs Analyst - Financial Affairs Support Team (FAST)
University of Wyoming and Subdivisions
Laramie, WY
Added 2 hours ago
SAP Developer
Oxford Global Resources
Beachwood, OH
Added 2 hours ago
Data Analyst I - Distribution System Operations
FirstEnergy
Akron, OH
Experience in the implementation of complex programs and projects.
Added 2 hours ago
Continuous Improvement Specialist
StandardAero Business Aviation Services
Cincinnati, OH
…Improvement Specialist, you will be a highly analytical and driven analyst to support continuous improvement initiatives across a large-scale aerospace component repair and manufacturing…
Added 2 hours ago
FC
Catalytic Redevelopment Manager (Management Analyst III)
Fairfax County
Fairfax, VA
- $38.84 to $67.96 USD / hour
Assists with development and implementation of economic development incentive programs, such as the Economic Opportunity Reserve, county economic development grant programs, and…
Added 3 hours ago
SB
Law and Justice Research Analyst (County Promotional)
San Bernardino County
San Bernardino County, CA
- $35.43 to $49.9 USD / hour
San Bernardino County is seeking experienced Law and Justice Research Analyst to coordinate and perform critical data analysis to inform decision-making that will help improve criminal…
Added 3 hours ago
SB
Systems Support Analyst III
San Bernardino County
San Bernardino County, CA
- $47.11 to $66.5 USD / hour
San Bernardino County is seeking an experienced Systems Support Analyst III to perform advanced technical work supporting the County’s enterprise technology infrastructure. This position…
Added 4 hours ago
Board Certified Behavior Analyst (BCBA)
Five Town CSD and MSAD 28
Camden, ME

Argo Cyber Systems

Network Forensics Defense Analyst

Arlington, VA, United States

$140,000 to $160,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $140,000 to $160,000 USD / year
Posting language: English
Posted: Nov 4, 2026

Original job description

Network Forensics Defense Analyst

Location: Remote / Onsite (as required) Clearance: Active TS/SCI (DHS EOD eligibility required) Company: Argo Cyber Systems, LLC – A Service-Disabled Veteran-Owned Small Business (SDVOSB)

About Argo Cyber Systems

Argo Cyber Systems delivers advanced cybersecurity and threat-hunting capabilities to safeguard federal and critical infrastructure environments. Our teams provide rapid incident response, digital forensics, proactive hunt operations, and continuous cyber defense across host-based, network-based, and cloud-based systems. We combine mission experience with innovation-empowering our customers to detect, disrupt, and defeat adversaries in real time.

Position Overview

The DHS Hunt and Incident Response Team (HIRT) secures the nation's infrastructure. HIRT provides DHS's front-line response for cyber incidents and proactive hunting for malicious cyber activity. Argo Cyber provides support for on- and offsite incident response to government agencies and critical infrastructure owners who experience cyber-attacks. Argo Cyber delivers HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation using host- and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the severity of breaches and develop mitigation/remediation plans.

Argo Cyber is seeking a Network Forensics Analyst with deep expertise in one or more edge device technologies (Cisco, Ivanti, Palo Alto, Ciena, Juniper) to support this critical customer mission.

Responsibilities

Serves as a hunt and incident response subject matter expert (SME), applying in-depth knowledge of threat actor tools, techniques, and procedures (TTPs), with a focus on network centric and edge device compromises.
Serves as an incident response expert in support of a technology insertion team, evaluating and integrating new network forensic and monitoring capabilities.
Assists the Government lead in coordinating teams for preliminary incident response investigations, including onsite and remote engagements.
Assists the Government lead by interfacing with the customer while onsite, clearly communicating status, findings, and recommendations.
Characterizes and analyzes network traffic (including PCAP, flow, and device logs) to identify anomalous activity and potential threats to network resources.
Identifies and analyzes anomalies in network traffic using metadata (e.g., flow records, DNS logs, proxy logs) to detect and scope malicious activity.
Reconstructs malicious attacks or activities based on network traffic, including timelines, attacker paths, and data exfiltration patterns.
Examines network topologies to understand data flows, trust boundaries, and potential choke points; uses this understanding to inform hunt and response activities.
Assesses network topology and device configurations, identifying critical security concerns and providing security best practice recommendations, especially for Cisco, Ivanti, Palo Alto, Ciena, and Juniper platforms.
Determines appropriate courses of action in response to identified and analyzed anomalous network activity, including containment, eradication, and hardening actions.
Applies knowledge of defense-in-depth principles and general attack stages to evaluate and improve network security architecture and edge-device configurations.
Applies knowledge of network device integrity concepts and methodologies to validate device state, detect unauthorized modification, and recommend remediation.
Leads analysis of device logs, configurations, and telemetry from routers, switches, firewalls, VPNs, and remote access appliances to identify, scope, and reconstruct intrusions.
Provides expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to hunt and incident response activities.
Serves as a technical expert on high-level incident response teams, providing technical direction, interpretation, and alternatives for network-centric incidents.
Exercises considerable latitude in determining technical objectives and independently develops technical solutions to complex problems requiring ingenuity and creativity.
Analyzes incident data and victim environments to recommend targeted mitigations, including network segmentation, policy updates, and device hardening.
Advises technical personnel on countermeasure implementation and customization (e.g., firewall rules, IPS signatures, access control lists).
Supports internal stakeholders on containment and eradication missions, on-site and remotely.
Ensures evidence integrity is preserved according to standard operating procedures or national standards when collecting network data, device artifacts, and logs.
Assists with the writing and publishing of Computer Network Defense (CND) guidance and detailed reports on incident findings to appropriate constituencies.
Distills analytic findings into executive summaries and in-depth technical reports suitable for both leadership and highly technical audiences.
Documents analysis, TTPs, and device specific incident handling procedures in a standardized knowledge base for sharing and publication.
Assists in maintaining branch process and procedure documentation and guides the completion of hunt and incident response activities.

Required Skills

U.S. Citizenship.
Active TS/SCI clearance.
Ability to obtain DHS Suitability.
8+ years of directly relevant experience
3+ years of experience related to the evaluation and implementation of new cyber response or network forensic capabilities.
Hands-on experience with incident response or network operations involving enterprise edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto, Ciena, Juniper.
Strong understanding of network architecture and security, including routing, switching, VPNs, firewalls, segmentation, and defense in depth.
Knowledge of Computer Network Defense (CND) policies, procedures, and regulations relevant to U.S. government or similar environments.
Ability to: o Characterize and analyze network traffic to identify anomalous activity and potential threats. o Identify and analyze anomalies in network traffic using metadata (flow, DNS, proxy, etc.). o Reconstruct malicious activity based on network traffic and device logs.
Understanding of general attack stages (reconnaissance, initial access, lateral movement, exfiltration, etc.) and how they manifest across the network.
Understanding of system and application security threats and vulnerabilities and how they are observed in network traffic.
Understanding of proactive analysis of systems and networks, including establishing trust levels of critical resources and detecting anomalous behavior.
Proficiency with common operating systems (e.g., Linux/Unix, Windows).
Experience performing cyber incident response (scoping, containment, eradication, recovery) in operational environments.
Ability to think independently, make sound decisions under pressure, and work with limited guidance.
Superior written and oral communication skills, including the ability to clearly explain technical issues to both technical and non-technical stakeholders.
Ability to work collaboratively across physical locations and within distributed teams.
Skilled in identifying different classes of attacks and attack stages and translating findings into actionable recommendations.
Rapid Network & Tapping Setup: Ability to quickly configure network TAPs, packet brokers, SPAN ports, and unmanaged/managed switches without disrupting live production or air-gapped traffic.

Desired Skills

Experience leading and mentoring technical teams in incident response, network operations, or security engineering.
Network and system administration experience in large or complex enterprise or service-provider environments.
Strong understanding of adversarial TTPs (including MITRE ATT&CK) and different operational threat environments (e.g., script kiddies, non nation state adversaries, nation state actors).
Knowledge of defense-in-depth and zero trust principles and their application to network and edge-device architectures.
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, injections, race conditions, covert channels, replay, ROP, malicious code).
Knowledge of network device integrity verification and monitoring approaches.
Hands-on skill in host/network intrusion detection and event correlation across multiple telemetry sources (firewalls, IDS/IPS, endpoint, SIEM).
Experience with malicious activity analysis, including network beaconing, C2, and data exfiltration detection.
Experience with Identity and Access Management (IAM) tools and their integration into network/edge security architectures.
Ability to review and analyze Enterprise Architecture (EA) from a security perspective and recommend architecture-level improvements.
Ability to collaborate with stakeholders at multiple levels within an organization (technical staff, management, senior leadership).
Field Diagnostics & Cyber Forensics: Skills in running preloaded analysis stacks, protocol parsers (e.g., Modbus, DNP3, OPC UA), vulnerability scanning, and local packet capture at line rate.
Compact Pack & Weight Management: Packing, securing, and transporting ruggedized cases (such as Pelican or Nanuk) that fit standard weight and carry-on/air-transport limits.

Required Education

BS in Computer Science, Cyber Security, Computer Engineering, or related degree; OR HS Diploma and 10+ years of technical experience in the area of expertise.

Desired Certifications (One or more)

IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Incident Responder, CEH,
SANS GIAC GCIA or GNFA (preferred for network forensics).
SANS GRID, GICSP, or GCIP (plus).
Vendor / network certifications (highly desired): o Cisco CCNA (or higher: CCNP Security, CCNP Enterprise). o Vendor certifications for Palo Alto, Juniper, Ciena, or Ivanti (e.g., PCNSE, JNCIS/JNCIP, etc.).

Why Argo Cyber Systems

At Argo, you'll be part of a mission-driven, veteran-founded cybersecurity team protecting America's most critical systems. We combine hands-on technical excellence with operational precision to outpace the threat. Join us to defend, detect, and innovate at the cyber edge.

Apply About employer

Report this job