Cyber Defense Engineer is charged with intrusion detection, attack analysis, and incident response of system and application layer attacks. Provide situational awareness of all Cyber Security Information across the enterprise network. Coordinate Cyber Defense Operations and monitor and report incident status, threat possibilities and trending. Have knowledge of computer, network, and application layer defense with a strong understanding of the lifecycle of cyber threats, typical attack vectors and techniques, and network, system, and application vulnerability exploitation.


Intrusion monitoring, attack analysis, and incident response duties as required and directed.

Monitor open source feeds and reporting on the latest threats against computer network defenses.

Supports incident escalation and assesses probable damages, identifies damage control and remediation, and assists in developing courses of action.

Assists with implementation of counter-measures or mitigating controls.

Assists with implementation of counter-measures or mitigating controls.

Coordinate efforts of and provide timely updates to multiple teams during response.

Knowledge and Skills Required:

  • Understanding of OSI model, networking, protocol and service expertise
  • Understanding of network security best practices
  • Experience with Windows and Linux Operating Systems and common applications
  • Understanding of normal operating system behavior.
  • Experience with the use of network analysis tools and network security devices (firewalls, proxies, etc.)
  • Understanding of core networking concepts (TCP/IP, etc.) and common protocols (HTTP, FTP, etc.)
  • Understaning of digital forensics, file system, registry, etc. artifacts commonly associated with malware or malicious activities.
  • Understaning of digital forensics, Memory analysis
  • Understaning of digital forensics, Malware reverse engineering
  • Familiarity with automation concepts and proficiency in scripting languages such as python, perl, ruby, javasscript, powershell, etc.
  • Strong analytical skills and critical thinking skills
  • Effective communication skills (both written and verbal)
  • Sound decision-making and judgment, especially under pressure.
  • Strong organization, prioritization, and rationalization skills.

Education and Experience Required:

  • Bachelor’s Degree or higher in the field of Computer Science or or related field (may be substituted for experience and industry certifications).
  • 1-2 years of experience in software developments using Python or related technology field preferred
  • Individual technical Cyber Security Certification.