Enter a job title or keyword

Cyber Defense Analyst (Sr. SOC)

CNS

Job Location:

Oak Ridge, TN - USA

Monthly Salary: Not provided by the employer

Posted: 20 May 2026 (30+ days ago)

Application Deadline: 17 August 2026

Vacancies: 1 Vacancy

The job posting is outdated and position may be filled

Job Summary

Location: Oak Ridge TN
Job Title: Cyber Defense Analyst (Sr. SOC)
Career Level From: Senior Associate
Career Level To: Senior Specialist
Job Specialty: Cyber Security

What Youll Do

The Cyber Defense Analyst (Senior SOC) will investigate analyze and respond to cyber incidents within the Y12 network environment or enclave.

Job functions include:

-Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents

-Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation

-Perform analysis of log files from a variety of sources (e.g. individual host logs network traffic logs firewall logs and intrusion detection system IDS logs) to identify possible threats to network security

-Perform cyber defense incident triage to include determining scope urgency and potential impact identifying the specific vulnerability and making recommendations that enable expeditious remediation

-Perform real-time cyber defense incident handling (e.g. forensic collections intrusion correlation and tracking threat analysis and direct system remediation) tasks to support deployable Incident Response Teams (IRTs)

-Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts

-Track and document cyber defense incidents from initial detection through final resolution

-Coordinate with intelligence analysts to correlate threat assessment data

-Perform cyber defense trend analysis and reporting

-Coordinate Adhoc cyber defense hunts.

-Additional responsibilities as necessary

What You Can Expect

Meaningful work and unique opportunities to support missions vital to national and global security
Top-notch dedicated colleagues
Generous pay and benefits with a stable organization
Career advancement and professional development programs
Work-life balance fostered through flexible work options and wellness initiatives

Minimum Job Requirements

Bachelors degree in engineering/science discipline: Minimum of 2 years of relevant experience.
Masters degree in engineering/science discipline: No experience.
Ten or more years of relevant education training and/or progressive experience may be considered to satisfy educational and years of experience for this posting.

Preferred Job Requirements

-Knowledge of cyber threats and vulnerabilities and what constitutes a network attack

-Knowledge of cyber-attack stages (e.g. reconnaissance scanning enumeration gaining access escalation of privileges maintaining access network exploitation covering tracks)

-Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions

-Knowledge of computer networking concepts and protocols and network security methodologies

-Knowledge of network security architecture concepts including topology protocols components and principles (e.g. application of defense-in-depth)

-Ability to perform network traffic and packet level analysis

-Ability to recognize and categorize types of vulnerabilities and associated attacks

-Strong problem solving and communication skills (both orally and in writing)

-Ability to handle sensitive situations with discretion and maintain confidentiality

-Knowledge of adversarial tactics techniques and procedures

-Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies

-Experience using security event correlation tools analytics or SIEM correlation experience skillset or background

-Experience protecting a network against malware. (e.g. NIPS anti-malware restrict/prevent external devices spam filters)

-Knowledge of malware analysis concepts and methodologies

-Knowledge of network protocols such as TCP/IP Dynamic Host Configuration Domain Name System (DNS) and directory services

-Knowledge of application security risks

-Knowledge of host/network access control mechanisms (e.g. access control list capabilities list)

-Knowledge of network services and protocols interactions that provide network communications

-Knowledge of cloud service models and how those models can limit incident response

-Knowledge of incident response and handling methodologies

-Knowledge of laws regulations policies and ethics as they relate to cybersecurity and privacy

-Ability to conduct vulnerability scans and recognize vulnerabilities in security systems

-Two years of relevant professional experience or five years of cyber incident response experience in an enterprise network environment.

Why Y-12

You get #morethanajob. We encourage employees to achieve a healthy personal balance among home work and the community. One of the ways we embrace work-life balance is by offering flexible work arrangements that provide alternatives to the traditional workweek while still meeting business needs. Top talent and personal commitment mean more to our success than any other factors so we reward our people with the kinds of benefits that make a positive difference in the quality of their lives. Benefits such as: medical plan prescription drug plan vision plan dental plan employer matched 401(k) savings plan disability coverage education reimbursement and many more. Want to stay healthy and fit but hate the cost of a gym membership Take advantage of one of our onsite workout facilities and eat healthy in our onsite cafeterias. Much more than a workplace at Y-12 you can build a career that lasts a lifetime.

Notes

The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired.

If a range of Career Levels is posted i.e. Senior Associate to Senior Specialist internal applicants already in one of the Career Levels would come across at their current Career Level. Internal applicants currently in a lower level Career Level would move to the lowest posted Career Level.

Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status. The ability to obtain and maintain a Department of Energy Q clearance is required.

This position may require entry into the Material Access Areas (MAA) and participation in the Human Reliability Program (10 C.F.R. Part 712) which requires successful competition of a DOE counterintelligence evaluation and may include a counterintelligence-scope polygraph examination.

This position may be categorized as a designated position identified by 10 C.F.R. Part 709 requiring successful completion of a DOE counterintelligence evaluation that may include a counterintelligence-scope polygraph examination.

CNS is a drug-free workplace. Candidates accepting a job offer will be required to pass a pre-placement physical drug screening and background investigation. As an employee you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees are subject to being randomly selected for drug testing without advance notification.

CNS is an equal opportunity employer. All qualified applicants will receive consideration for employment based on merit and without regard to race color religion sex sexual orientation national origin protected veteran status or disability.

Required Experience:

Senior IC

Apply Now