Cyber Defense Analyst

BLUE ORIGIN

. Monitor and triage security events and alerts across SIEM, EDR, network sensors, and audit logs .

Posted 9/18/2026full-timeColorado • United StatesMid-LevelSenior💰 $74,537 - $113,838 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations and incident response, with a strong foundation in network protocols and system administration. Proficient in utilizing SIEM and EDR tools for monitoring, investigation, and automation of security tasks.

Highest-signal resume keywords

Security OperationsIncident ResponseSIEM and EDR ConceptsMITRE ATT&CK ExposureDoD 8140 CSSP Analyst Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network ProtocolsWindows FundamentalsLinux FundamentalsIncident InvestigationThreat HuntingPrivileged User Activity MonitoringLog Source OnboardingDetection TuningAutomation of Security TasksEvidence Preservation

Soft Skills

Clear Written Communication

Tools & Technologies

SIEMEDRNetwork SensorsAudit Logs

Certifications & Qualifications

DoD 8140 CSSP Analyst CertificationIAT Level II CertificationSecurity+ CE

Industry Keywords

Incident Response ProceduresNational Security SystemsClassified Facilities AccessU.S. Government Top Secret ClearancePeriodic Polygraph

Tech Stack

Tools & technologies

Linux

About the role

Key responsibilities & impact

Monitor and triage security events and alerts across SIEM, EDR, network sensors, and audit logs
Investigate host, network, and identity data and document findings
Serve as first responder during incidents; execute containment steps, preserve evidence, build timelines, and support senior engineers
Participate in structured threat hunts
Perform privileged user activity monitoring and audit log review with Security and Counterintelligence
Provide heightened monitoring during launches, mission operations, and other critical windows
Assist with sensor deployment, log source onboarding, and agent rollout across classified enclaves
Tune detections, reduce false positives, validate rule coverage, and propose new detections
Execute response procedures and identify playbook gaps
Automate recurring triage, enrichment, and reporting tasks
Collaborate with senior engineers in classified spaces and support national security systems

Requirements

What you’ll need

Entry-level hands-on experience in security operations, incident response, IT operations, or system administration, or equivalent military/government cyber experience
Working knowledge of network protocols and Windows and Linux fundamentals
Familiarity with SIEM and EDR concepts and ability to investigate events using them
Understanding of common attack techniques and exposure to MITRE ATT&CK
Clear, concise written communication
Active U.S. Government Top Secret clearance with SCI eligibility and eligibility for SAP access determination
DoD 8140 CSSP Analyst or IAT Level II certification (Security+ CE or equivalent) at hire or within 6 months
A degree is not required; equivalent military, government, or hands-on technical experience is accepted
Ability to obtain and maintain access to classified facilities
U.S. citizenship or nationality, U.S. permanent residence, refugee status, or asylum status required under export control regulations
Periodic polygraph may be required

Benefits

Comp & perks

Medical, dental, and vision insurance
Basic and supplemental life insurance
Paid parental leave
Short- and long-term disability
401(k) with company match of up to 5%
Education Support Program
Stock options for all regular employees working at least 20 hours/week
Up to four weeks of paid time off per year based on weekly scheduled hours
Up to 14 company-paid holidays
Potential role- and job-level-dependent bonuses and other benefits
Limited travel, up to 10%