Cyber Defense Analyst Jobs
Cyber Defense Analyst jobs are open across defense contracting, federal agencies, financial services, and healthcare, from entry-level to senior and lead, with specializations in threat intelligence, incident response, and security operations. Scan the live roles below and apply to whichever ones fit.
Find Cyber Defense Analyst JobsLooking for remote work? View remote cyber defense analyst jobs →Overview
Showing 5 of 57+ Cyber Defense Analyst jobs
Recruiting for this role ends on November 30, 2026.
Work You'll Do
As a Defense Cyber Operations Engineer (DCO) SME on our Enterprise Security team, you will be responsible for...
- Leading engineers across complex Defensive Cyber Operations assignments and aligning team members toward mission objectives and deliverables
- Lead the development and refinement of Defensive Cyber Operations methodologies and presenting solutions to cyber defense and technical implementation challenges
- Assessing cyber key terrain to understand mission requirements, system architecture, and associated threats, and advising on defensive architecture and technologies
- Advises on technical designs, implementation, configuration, tuning, and adaptation of cyber defensive capabilities to protect, detect, and respond to cyber threats and attacks
- Authoring and maintaining documentation such as standard operating procedures, checklists, implementation guides, architecture diagrams, and crew binders to support Defensive Cyber Operations.
- Contributes to deliverables and performance metrics.
- Researches cyber defense technologies for best fit based on mission, architecture, and current threat.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Strong cyber and technical acumen.
- Ability to meet deadlines
- Ability to provide clear guidance to others
The Team
Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.
The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.
Qualifications
Required:
- Bachelor's degree in a related field, plus 18 years of professional experience.
- Active TS/SCI or SCI eligibility is required.
- 7+ years of professional technical experience in cyber defense or cybersecurity related field (e.g. engineering, networking, systems integration, or technology solutions) with 2 years of supervisory experience.
- Experience in at least 3 of the following areas: containers or virtual environments (e.g. Docker, Kubernetes, VMware, or AWS); network traffic collection and aggregation platforms (e.g. Gigamon); data storage solutions (e.g. Network File System, Ceph, or distributed storage); data analysis platforms (e.g. Elasticsearch, Logstash, Kibana, or Splunk); Agile software development frameworks; Windows operating systems; network infrastructure; or security applications (Security Orchestration, Automation, and Response (SOAR), Security Information and Event Management (SIEM), or Intrusion Detection Systems (IDS),
- Experience supporting cyber defense architecture, threat detection, incident response, or security operations
- Experience authoring technical documentation such as standard operating procedures, implementation guides, or architecture diagrams
- Experience advising on the technical design and implementation of cyber defensive capabilities
- Experience with containerization packages.
- Experience with Network monitoring.
- Experience with RedHat Linux operating system.
- Certification related to cybersecurity (e.g. Certified Ethical Hacker, CompTIA Cloud+, CompTIA Cybersecurity Analyst, CompTIA Security+, GIAC Security Essentials Certification, etc.)
- Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Masters Degree and 10 years of experience.
- Experience supporting Department of Defense or Federal environments
- Experience assessing mission systems, architecture, and cyber threat activity
- Experience with security engineering across enterprise or mission-focused environments
- Experience leading technical workstreams or teams on cyber defense efforts
- Prior experience working on a Cyber Protection Team. Systems administration experience.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $91,100 to $151,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Recruiting for this role ends on November 30, 2026.
Work You'll Do
As a Defense Cyber Operations Engineer (DCO) SME on our Enterprise Security team, you will be responsible for...
- Leading engineers across complex Defensive Cyber Operations assignments and aligning team members toward mission objectives and deliverables
- Lead the development and refinement of Defensive Cyber Operations methodologies and presenting solutions to cyber defense and technical implementation challenges
- Assessing cyber key terrain to understand mission requirements, system architecture, and associated threats, and advising on defensive architecture and technologies
- Advises on technical designs, implementation, configuration, tuning, and adaptation of cyber defensive capabilities to protect, detect, and respond to cyber threats and attacks
- Authoring and maintaining documentation such as standard operating procedures, checklists, implementation guides, architecture diagrams, and crew binders to support Defensive Cyber Operations.
- Contributes to deliverables and performance metrics.
- Researches cyber defense technologies for best fit based on mission, architecture, and current threat.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Strong cyber and technical acumen.
- Ability to meet deadlines
- Ability to provide clear guidance to others
The Team
Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.
The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.
Qualifications
Required:
- Bachelor's degree in a related field, plus 18 years of professional experience.
- Active TS/SCI or SCI eligibility is required.
- 7+ years of professional technical experience in cyber defense or cybersecurity related field (e.g. engineering, networking, systems integration, or technology solutions) with 2 years of supervisory experience.
- Experience in at least 3 of the following areas: containers or virtual environments (e.g. Docker, Kubernetes, VMware, or AWS); network traffic collection and aggregation platforms (e.g. Gigamon); data storage solutions (e.g. Network File System, Ceph, or distributed storage); data analysis platforms (e.g. Elasticsearch, Logstash, Kibana, or Splunk); Agile software development frameworks; Windows operating systems; network infrastructure; or security applications (Security Orchestration, Automation, and Response (SOAR), Security Information and Event Management (SIEM), or Intrusion Detection Systems (IDS),
- Experience supporting cyber defense architecture, threat detection, incident response, or security operations
- Experience authoring technical documentation such as standard operating procedures, implementation guides, or architecture diagrams
- Experience advising on the technical design and implementation of cyber defensive capabilities
- Experience with containerization packages.
- Experience with Network monitoring.
- Experience with RedHat Linux operating system.
- Certification related to cybersecurity (e.g. Certified Ethical Hacker, CompTIA Cloud+, CompTIA Cybersecurity Analyst, CompTIA Security+, GIAC Security Essentials Certification, etc.)
- Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Masters Degree and 10 years of experience.
- Experience supporting Department of Defense or Federal environments
- Experience assessing mission systems, architecture, and cyber threat activity
- Experience with security engineering across enterprise or mission-focused environments
- Experience leading technical workstreams or teams on cyber defense efforts
- Prior experience working on a Cyber Protection Team. Systems administration experience.
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $91,100 to $151,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Cyber Defense Analyst Jobs by Experience Level
See All 57 Cyber Defense Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cyber Defense Analyst JobsCyber Defense Analyst Job Market
Who's Hiring
Top Industries Hiring
- Staffing & Recruiting
What Employers Look For
The qualifications that appear most often in cyber defense analyst jobs.
- Active or eligibility for DoD Secret or Top Secret security clearance
- Proficiency with SIEM platforms such as Splunk or Microsoft Sentinel
- CompTIA Security+ or equivalent DoD 8570 baseline certification
- Experience with endpoint detection and response tools like CrowdStrike or Carbon Black
- Bachelor's degree in cybersecurity, computer science, or a related field
- Familiarity with MITRE ATT&CK framework and threat intelligence analysis
Tips for Your Cyber Defense Analyst Job Search
Tailor your resume to clearance levels
Many cyber defense analyst postings specify a required clearance tier, from Secret to Top Secret/SCI. List your active clearance, the granting agency, and the date of your last investigation prominently so hiring managers don't have to dig for it.
Certify before applying to federal roles
DoD 8570 and 8140 mandate specific certifications for roles supporting federal systems. If you're targeting government or contractor positions, confirm your CompTIA Security+, CEH, or CISSP aligns with the IAT or IAM level the posting requires before you apply.
Apply early to roles that fit
Migrate Mate lists cyber defense analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Highlight SIEM and EDR tool fluency
Job postings routinely call out specific platforms like Splunk, Microsoft Sentinel, or CrowdStrike by name. Mirror that language in your resume's skills section and describe a concrete investigation or detection you ran using each tool you claim proficiency in.
Prepare for scenario-based interview questions
Expect interviewers to walk through a live incident scenario and ask how you'd triage, contain, and document it. Practice talking through the kill chain in plain language, naming the specific tools and runbooks you'd use at each stage.
Negotiate scope alongside salary
When you receive an offer, ask which threat domains the team actively monitors and whether the role rotates across the SOC. Scope directly affects your skill development, and clarifying it before you accept avoids surprises in your first 90 days.
Cyber Defense Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most cyber defense analysts?
The companies hiring the most cyber defense analysts right now include Deloitte, Nightwing, and CALNET, with the largest share of openings in Virginia, Maryland, and North Carolina, based on current listings on Migrate Mate as of November 2026. Defense contractors and federal agencies consistently account for a large portion of active postings.
How many cyber defense analyst jobs are remote?
About 79% of cyber defense analyst openings are fully remote or hybrid as of November 2026, though the share varies significantly by employer type. Threat intelligence and security operations center roles that don't require classified network access tend to offer the most remote flexibility, while positions supporting classified government systems are almost always on-site.
How do you become a cyber defense analyst?
Start by building a foundation in networking and operating systems, then earn a recognized entry-level certification such as CompTIA Security+ to validate baseline knowledge. Gain hands-on experience through a SOC analyst or IT support role, practice threat detection in home lab environments, and work toward mid-level certifications like CEH or CySA+ as you pursue analyst-level postings.
How do you get hired as a cyber defense analyst with little experience?
Target junior SOC analyst or tier-one analyst roles, which are specifically designed for candidates earlier in their careers. Demonstrating hands-on work matters more than a long resume: build detection rules in a free SIEM trial, document an incident response walkthrough in a lab environment, and get CompTIA Security+ on the books before applying to roles that list it as a minimum requirement.
What does the cyber defense analyst interview process look like?
Most processes run three to four stages. An initial recruiter screen is followed by a technical phone or video interview covering threat analysis concepts, SIEM usage, and common attack vectors. A later round typically includes a hands-on scenario or case study where you walk through triaging a simulated incident. Final rounds often involve a panel with the SOC lead and a hiring manager who assess cultural fit and communication clarity.
Where can I find and apply to cyber defense analyst jobs?
You can find and apply to cyber defense analyst jobs on Migrate Mate, which lists current openings from employers across the United States. Search for roles that match your clearance level, certifications, and tool experience, then apply directly to each listing that fits.
See All 57 Cyber Defense Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Cyber Defense Analyst Jobs