Cyber Intrusion Analyst (SOC) On-Site
Job Description
This role supports a large enterprise Department of Defense program by providing real-time cyber intrusion analysis within a high-visibility Security Operations Center. You will detect, investigate, and respond to network security incidents, working closely with Cyber Defense Service Provider (CND-SP/CSSP) teams to protect mission-critical systems and networks. As a technical leader within the team, you will help maintain the integrity and security of enterprise-wide environments, guide the use of monitoring tools, and contribute to the development and tuning of countermeasures against emerging threats.
Responsibilities
- Work closely with Government counterparts to provide expert guidance within the Computer Network Defense Service Provider (CND-SP) area, ensuring alignment with mission needs and security objectives.
- Provide comprehensive CND reporting, including trends, responses, mitigations, analysis, and information dissemination to leadership and mission partners.
- Deliver command and control (C2) support and situational awareness for all CND activities across Protect, Detect, Respond, and Sustain functions.
- Serve as a technical leader within the Cyber Security Service Provider (CSSP) team, responsible for maintaining the integrity and security of enterprise-wide systems and networks.
- Provide technical leadership to CND teams by supporting security initiatives through predictive and reactive analysis and clearly articulating emerging trends and threats to leadership and staff.
- Perform computer network incident detection and response activities to detect, correlate, identify, and characterize anomalous activity that may indicate threats to the enterprise.
- Monitor various security tools and applications, primarily Splunk and Elastic, for potential malicious activities and investigate associated alerts or indicators.
- Develop and recommend courses of action, including mitigation strategies, based on findings from security tools, logs, and network traffic analysis.
- Conduct analysis of low-level or "low and slow" events to identify unauthorized activity using exploratory problem-solving and self-learning techniques.
- Perform near real-time event triage and analysis, which may result in network traffic validation or the creation of incident reports for mission partners.
- Utilize formal monitoring policies and procedures, including DoD-approved network monitoring and traffic analysis tools, to identify suspicious, anomalous, or malicious network traffic on a 24/7/365 basis.
- Review and analyze available logs in a timely manner to detect intrusions and notify mission partners of relevant activity through formal reporting processes.
- Apply, develop, tune, and distribute or optimize new and existing countermeasures or guidance to prevent or mitigate potential cyber event impacts whenever possible.
- Perform detailed network traffic analysis using raw packet data, netflow, IDS, IPS, and custom sensor output to identify and understand security events.
- Configure and manage firewalls, IDS/IPS, and other security appliances to support Protect, Defend, Respond, and Sustain activities.
- Audit network traffic, harden devices, and implement security policies to enhance the overall security posture.
- Use command-line scripting (such as PERL, Python, and Shell) to automate tasks, streamline analysis, and improve operational efficiency.
- Support DOD-related projects or programs by providing cyber incident handling expertise and real-time analysis.
- Collaborate with other SOC analysts across multiple shifts to ensure continuous monitoring and consistent incident handling coverage.
Essential Skills
- At least 4 years of overall professional experience, preferably combined with a bachelors degree.
- Active Secret clearance, with an active Top Secret clearance preferred.
- Minimum of 2 years of Computer Network Defense (CND) analysis experience, including hands-on use of SIEM tools such as Splunk or other SIEM platforms.
- Prior experience performing CND duties across Protect, Defend, Respond, and Sustain functions, including configuring firewalls, IDS/IPS, auditing network traffic, hardening devices, and implementing security policies.
- Demonstrated experience monitoring IDS and computer defense appliances, specifically using tools such as Splunk and Elastic.
- Experience evaluating and interpreting packet captures and network traffic to identify security incidents.
- Proficiency with command-line scripting, particularly in PERL, Python, and/or Shell scripting, to automate operational and analytical tasks.
- Prior experience supporting Department of Defense-related projects or programs.
- Ability and willingness to work assigned shifts, including day, swing, or night schedules in a 24/7/365 SOC environment.
- Strong incident response, cyber security, and vulnerability assessment skills, including familiarity with SIEM-driven workflows.
- Possession of Security+ (or equivalent baseline security certification) in combination with a Top Secret clearance as a core requirement for the role.
Additional Skills and Qualifications
- Ability to obtain CYSA+ or CEH certification within 6 months of hire; holding these or other advanced cyber certifications at the time of hire is a strong plus.
- Experience working in a high-tempo Security Operations Center (SOC) or Cyber Defense environment supporting enterprise networks.
- Familiarity with DoD network monitoring and traffic analysis tools and formal monitoring policies and procedures.
- Experience conducting analysis of low-level, "low and slow" events to uncover stealthy or persistent threats.
- Strong analytical, problem-solving, and self-learning capabilities to investigate complex or ambiguous security events.
- Effective communication skills to clearly articulate findings, trends, and recommendations to leadership, peers, and mission partners.
- Ability to collaborate in a team environment and provide technical leadership or mentorship to other analysts.
- Comfort working with structured reporting processes and formal incident documentation for mission partners.
- Experience working with or within Cyber Security Service Provider (CSSP) or CND-SP environments is beneficial.
Work Environment
This is an on-site role based in Ford Island, Hawaii, requiring presence on-site 5 days per week within a 24/7/365 Security Operations Center. The team operates multiple shifts, including day (approximately 05001500 HST), swing (approximately 11002100 HST), and night/mid (approximately 20000600 HST), with analysts working in pairs across these schedules to ensure continuous coverage. You will work in a secure, mission-focused operations environment alongside other cyber analysts, engineers, and mission partners. The role involves extensive use of security technologies such as Splunk, Elastic, IDS/IPS platforms, raw packet capture tools, netflow analysis tools, and DoD-approved network monitoring and traffic analysis solutions. The setting is highly collaborative, structured, and process-driven, with formal monitoring policies, incident reporting procedures, and a strong emphasis on operational discipline and situational awareness.
Job Type & Location
This is a Contract to Hire position based out of Honolulu, HI 96822.
Pay and Benefits
The pay range for this position is $50.48 - $69.72/hr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)
Workplace Type
This is a fully onsite position in Honolulu,HI 96822.
Application Deadline
This position is anticipated to close on Oct 22, 2026.
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services
Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.