Cyber Intel Analyst / Penetration Tester (Cybersecurity)

Location: On-site in Colorado Springs, Colorado, United States; travel up to 10% to CONUS and OCONUS locations may be required.

Salary: $85,000–$115,000 USD annually.

Company

hirify.global provides engineering, science, and advanced technology solutions for government and private-sector missions, including safety, security, resiliency, space, and information systems.

What you will do

• Analyze endpoint, network, system, and security-event telemetry to identify detection opportunities and visibility gaps in Defensive Cyberspace Operations for Space platforms.
• Map mission-relevant threats, telemetry, detections, and adversary TTPs to MITRE ATT&CK.
• Develop and maintain ATT&CK Navigator layers, detection-coverage heatmaps, detection logic, queries, scripts, visualizations, and repeatable analytical processes.
• Evaluate security data across collection, parsing, normalization, enrichment, ingestion, indexing, storage, search, and visualization.
• Translate findings into operator guidance and document detection gaps, mission risks, corrective actions, and recommended data sources.
• Support purple-team and threat-emulation activities and collaborate with cyber operators, intelligence analysts, administrators, engineers, quality-control personnel, and mission stakeholders.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information technology, engineering, data science, or a related field, plus three or more years of relevant experience; equivalent education, military training, certifications, and professional experience may be considered.
• Experience in detection engineering, threat hunting, incident response, network defense, security analytics, or SOC operations, including hands-on investigation, SIEM querying, detection tuning, threat hunting, telemetry analysis, or log-source validation.
• Experience applying MITRE ATT&CK to adversary TTPs, telemetry, detection logic, and coverage-gap analysis.
• Experience analyzing endpoint, network, system, or security-event data using SIEM, EDR, network-security-monitoring, or comparable analytics platforms.
• Ability to develop and refine detection logic, queries, scripts, visualizations, and repeatable analytical processes, and to evaluate whether security data is properly collected, parsed, normalized, enriched, indexed, searchable, and available to cyber operators.
• Strong analytical, problem-solving, organizational, communication, and collaboration skills, with the ability to document and present complex technical findings to operator, engineering, mission, and leadership audiences.
• Proficiency with Microsoft Word, Excel, and PowerPoint.
• DoD 8140 qualification for the assigned DCWF work role and proficiency level through an approved certification.
• Active DoD Top Secret security clearance with SCI eligibility and U.S. citizenship are required.

Nice to have

• Experience supporting DoD, USSF, DCO-S, intelligence-community, or other mission-system environments.
• Experience with ATT&CK Navigator, purple-team exercises, adversary emulation, detection-as-code, or Sigma.
• Experience with Bash scripting.
• Current Security+, CySA+, or another certification approved for the assigned DCWF work role and proficiency level.

Culture & Benefits

• Regular full-time employment.
• Comprehensive benefits package and a supportive working environment.
• No drug screen is required.
• A seven-year pre-employment background check is required.
• Access to U.S. federal facilities may require a REAL ID-compliant identification document or an acceptable alternative.