Cyber Real-Time Analysts (TN22) (Cybersecurity)

Location: Full-time onsite at Ford Island, HI; telework is not permitted. Relocation reimbursement of up to $10,000 may be available. Travel is required approximately 10% of the time.

Salary: $115,000–$150,000 annually, depending on experience and position level.

Company

hirify.global provides security compliance, program governance, consulting, and customized technology solutions for public sector clients.

What you will do

• Monitor and triage intrusions, vulnerabilities, and security events across DISA enterprise boundaries in a 24/7/365 watch environment.
• Correlate network alerts, NetFlow, packet captures, deep inspection data, IDS/IPS logs, endpoint telemetry, and identity events to identify attack chains.
• Perform SIEM analytics and threat hunting using Splunk, Microsoft Sentinel, Azure Lighthouse, and Elastic Stack.
• Configure and tune cyber defense platforms, detection signatures, countermeasures, and security monitoring tools.
• Support cybersecurity operations for PACOM Mission Network, JOE-CE, cloud enclaves, and classified environments up to Top Secret/SCI in SCIF facilities.
• Document incidents, prepare Situational Awareness Reports and Tippers, and coordinate defense priorities with DISA, USPACOM, USCYBERCOM, and partner CSSPs.

Requirements

• Active DoD Top Secret clearance with SCI eligibility is required; Secret clearance may be accepted with government approval.
• Must work onsite at Ford Island, HI on rotating 10-hour shifts, including days, nights, weekends, and holidays.
• Level II: Bachelor’s degree and 2+ years of relevant CND experience, or equivalent associate-degree or experience-based qualifications.
• Level III: Bachelor’s degree and 4+ years of relevant experience, or equivalent associate-degree or experience-based qualifications.
• Valid DoD 8140.03 / DCWF Work Role Code 531 certification or related degree at the Intermediate Proficiency Level, such as Security+ CE, CySA+, CEH, GSEC, GICSP, CND, CCNA-Security, CASP+ CE, CISSP, GCIA, or GCIH.
• Hands-on SOC experience with alert triage, intrusion analysis, SIEM querying, KQL, networking protocols, Wireshark, TCPdump, and NetFlow.

Nice to have

• Experience with DISA boundary systems, Thunderdome ZTNA, MITRE ATT&CK, hybrid government cloud, Microsoft Defender, EndGuard, Sysmon, JIRA, Rally, or DoD incident reporting tools.
• Experience using Gemini, Grok, or ChatGPT to automate triage workflows or create detection playbooks.

Culture & Benefits

• Medical, dental, and vision coverage with multiple medical plan options.
• Paid time off, paid holidays, and paid parental leave.
• Pre-tax and Roth retirement savings plans, flexible spending accounts, and dependent care savings accounts.
• Life insurance, short- and long-term disability coverage, and an employee assistance program.
• Tuition and training reimbursement; telecommuting may be available for eligible roles.
• A $10,000 sign-on bonus may be available subject to a 12-month commitment.