N

Cyber Real Time Analyst (TS/SCI) - JFN SOC

Newberry Group • United State
Relocation
Apply Now
AI Summary

Newberry Group seeks a mission-focused Cyber Real Time Analyst for a 24/7/365 defensive cyber operations team supporting the Joint Fires Network (JFN) SOC. Responsibilities include real-time threat detection, incident response, and advanced sensor tuning within secure SCIF facilities. This role requires an active TS/SCI clearance and a DoD 8140/8570 baseline certification at the Intermediate Proficiency Level.

Key Highlights
24/7/365 Real-Time Threat Detection and Triage
TS/SCI Incident Response and DIA-Aligned Reporting
Advanced Sensor Tuning, Playbook Development & Threat Hunting

Looking to advance your IT & Network Engineering career with relocation support? Explore IT & Network Engineering Jobs with Relocation Packages that include comprehensive packages to help you move and settle in your new role.

Key Responsibilities
Execute 24/7/365 real-time security monitoring, alert intake, and alert triage across JFN transport layer components, edge nodes, and out-of-band management channels
Conduct manual syslog reviews and ingest pipeline verification to identify malicious activity, configuration drifts, or indicators of compromise
Leverage and help operationalize the enterprise Security Information and Event Management (SIEM) environment utilizing Elastic Search / Elastic Defend, analyzing Kibana dashboards and basic Elastic alerts to uncover stealthy intrusions
Enforce standardized incident intake, triage, tracking, and escalation workflows utilizing Atlassian JIRA across all watch rotations
Support the development, operational testing, and live execution of the JFN Incident Response Plan
Ensure full compliance with Defense Intelligence Agency requirements for TS/SCI incident handling; rigorously document, triage, and escalate network spills, security breaches, unauthorized access attempts, and operational anomalies via mandated channels within required timeframes
Deliver operational execution for four of the seven DoD Cybersecurity Service Provider core functions during Phase I standup, expanding into full operational capability during Phase II sustainment
Monitor, operate, and provide tuning recommendations for high-fidelity network security sensors, such as Corelight (Zeek-based telemetry) and Darktrace Managed Detection & Response
Develop, test, and document novel threat hunting playbooks targeting behavioral anomalies, out-of-band communication channels, lateral movement, and advanced traffic patterns across JFN SD-WAN nodes
Leverage JIRA to author, refine, and maintain repeatable standard operating procedures (SOPs) and runbooks for containment actions, remediation coordination, and defensive countermeasures
Partner closely with JFN Tier II NOC engineers (SolarWinds/Jira), DISA enterprise boundary defenders, and NIWC data pipeline engineers ingesting Palo Alto ATP, Prometheus, and endpoint telemetry
Technical Skills Required
Elastic SIEM Network Protocols Incident Response

Discover our full range of relocation jobs with comprehensive support packages to help you relocate and settle in your new location.

Benefits & Perks
Relocation expenses may be eligible for reimbursement
Medical coverage with three plan options
Dental and vision coverage

Interested in relocating to United State? Check out our comprehensive Relocation Jobs in United State page with detailed relocation packages and benefits.

Nice to Have
Prior experience defending DoD networks across Impact Level 6/7 (IL-6/7), SIPRNet, or TS/SCI / JWICS enclaves
Hands-on experience with Corelight (Zeek) sensor analysis, Darktrace MDR, or Palo Alto Advanced Threat Prevention (ATP) logs
Experience developing structured threat hunting playbooks or detection logic mapped to the MITRE ATT&CK for Enterprise framework
Experience supporting C4ISR systems or joint tactical enclaves (e.g., PMN)

Job Description

Newberry Group is seeking proactive and mission-focused to join our customer's defensive cyber operations team supporting the Security Operations Center (SOC). Operating from secure SCIF facilities at DISA Pacific (Ford Island, HI), this 24/7/365 watch team provides front-line threat detection, continuous monitoring, and incident response for the JFN Impact Level 7 (IL-7) and multi-level classified operational environments.
Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

Apply Now
See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources
Job Overview
Posted Date Sep 30, 2026
Employment Type Full-time
Experience Level Mid-Senior level
Location United State
Category Networking
Company Newberry Group
Mentioned Skills
elasticsearch elk ceh cissp ccna wan bgp udp incident response dod palo alto syslog siem dns prometheus jira cybersecurity network security wireshark

Similar Jobs

Explore other opportunities that match your interests

VP of People
Networking
•
12m ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

gc ai

United State

Network Engineer
Networking
•
4h ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

American Family Insurance

United State

PC Network Support Technician 2 - Weekend Shift

Networking
•
4h ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Northrop Grumman

United State

Subscribe our newsletter

New Things Will Always Update Regularly