
Posted 9 days ago
Cyber Engineer/Analyst
AI Summary
The Intermediate Cyber Solution Engineer serves as a subject matter expert for complex NDR alerts, conducts proactive threat hunting, authors incident response playbooks, and mentors junior analysts.
About this role
Role Description
The Intermediate Cyber Solution Engineer acts as the bridge between tactical operations and strategic defense. In addition to handling escalations, this role moves beyond reactive monitoring into proactive threat hunting and process codification. You are expected to mentor junior staff and translate technical findings into actionable playbooks.
Core Responsibilities
- Incident Escalation: Serve as the Subject Matter Expert (SME) for complex NDR alerts that require deeper investigation than the associate level can provide.
- Threat Hunting: Conduct quarterly "Compromise Assessments" by analyzing historical network metadata to find dormant threats.
- Process Engineering: Author "Runbooks" and playbooks that turn successful incident resolutions into repeatable, automated team processes.
- Advanced Analysis: Perform detailed log analysis and parsing to identify patterns of malicious behavior.
Requirements
-
- Experience: 3-6 Years of progressive cybersecurity experience
- Advanced Linux/Unix/Windows troubleshooting, SIEM/SOAR querying, and MITRE ATT&CK framework mapping
- Advanced network troubleshooting
- Experience with log analysis and log parsing
- Previous work in customer-facing roles
- Advanced knowledge of cyber security principles and practices
- Demonstrated ability to use LLMs for self-research and troubleshooting while maintaining a "trust but verify" mindset
- Preferred:
- Basic Python scripting
- Experience threat hunting
- Network admin experience
- Experience interacting with LogScale, Zeek, and/or Suricata
- Clearance
- Education:
- Bachelor’s degree in a STEM field.
- Non-Traditional Path: 4+ years of relevant military experience (e.g., MOS 25D, 17C) or intensive technical experience in SysAdmin/NetAdmin roles.
- Certifications: GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), or CompTIA CySA+. Reason: These validate the ability to perform high-level analysis and incident response.
PHYSICAL REQUIREMENTS
- Prolonged periods of sitting at a desk and working on a computer.
- Must be able to lift up to 15 pounds.
Morphworks is an Equal Opportunity/Affirmative Action Employer, including disability and veterans.Compensation at Morphworks/Arrowpoint varies depending on factors such as location, skillset, role and level of experience. A reasonable compensation range for this position is 95,000-115,000k, in addition to benefits including medical, dental, vision, long term and short term disability, 401(k) and PTO.
Skills
Explore related jobs
More jobs at Morphworks
Similar CompTIA CySA+ jobs
Jobs in McLean
- F
Adobe Creative Cloud Scripting / Automation Developer - Senior | TS/SCI w/ PolyFalls Technology · McLean, Virginia - F
Web Accessibility Developer / Section 508 Specialist - Senior | TS/SCI w/ PolyFalls Technology · McLean, Virginia - SInstructional DesignerSteampunk · McLean, VA
- M
Retail Cosmetics Sales Associate - Dior Beaute, Tysons Corner Center - Part TimeMacy's · McLean, VA - A
Adobe Creative Cloud Software EngineerArdent Principles, Inc. · McLean, Virginia - A
Web DeveloperArdent Principles, Inc. · McLean, Virginia
Browse these categories
Market data for this role
All reports →- SeriesRole reportsOne role family at a time: how many openings, what changed this week, who is hiring, what it pays.
- SeriesSalary reportsWhat employers publish in job postings, by level and workplace. Not self-reported pay.
- Market overviewState of tech hiring, September 2026: up 4.8%Tech hiring rose 4.8% month over month in September 2026, with 411,122 new listings. Customer support and account executive roles led the growth.