Cyber Fusion Analyst (TS/SCI) - 174320

Zachary Piper Solutions is seeking a Sr. Cyber Fusion Analyst to support the Department of Defense’s ongoing mission for the Cyber Defense Command at Ft. Meade, MD. The analyst will produce and disseminate all‑source integrated intelligence analysis to support DODIN and defensive cyberspace operations.

Clearance: TS/SCI required
Location: Ft. Meade, MD (100% onsite)

Responsibilities

• Utilize network monitoring and detection tools, including NetFlow, IDS, protocol logs, and PCAP data, to identify malicious cyber activity.
• Support the development of Cyber Fusion SOPs, frameworks, and methodologies aligned with industry and Department of War standards.
• Identify enterprise threats and recommend mitigation strategies to strengthen security and reduce risk.
• Analyze threat intelligence, OSINT, and vulnerability data to prioritize response and remediation efforts.
• Assess and document adversary tactics, techniques, and procedures (TTPs) and their impact on the operational environment.
• Detect and investigate adversary activity, anomalies, and suspicious events across logs, SIEMs, and security monitoring platforms.
• Conduct compromise assessments and produce analytical reports and attack‑lifecycle visualizations.
• Provide risk assessments and security recommendations based on threat, intelligence, and vulnerability analysis.
• Recommend enhancements to cyber defense measures protecting the Department of War Information Network (DOWIN).
• Track and analyze cybersecurity metrics and trends to deliver actionable situational awareness.

Qualifications

• Bachelor’s degree in a related discipline and 8+ years of experience with cyber threat intelligence analysis.
• Provide intelligence analysis and assessments to support joint military cyber planning efforts, including operational plans, Annex B development, and planning groups.
• Knowledge of network and application protocols, cyber vulnerabilities, exploitation techniques, and cyber threat/adversary methodologies.
• Experience with datasets, tools, and protocols that support analysis (e.g., passive DNS, VirusTotal, Recorded Future, TCP/IP, OSI, WHOIS, enumeration, threat indicators, malware analysis results, Wireshark, Splunk, ArcSight, etc.).
• Experience with various open‑source and commercial vendor portals, services, and platforms that provide insight into how to identify and/or combat threats or vulnerabilities to the enterprise.
• Proficiency working with various types of network data (e.g., NetFlow, PCAP, custom application logs).

Compensation

Total compensation based on experience level – $130,000‑$175,000+.

Benefits

• PTO/Holidays
• Cigna Medical, Dental, and Vision
• 401(k) with ADP
• Certification reimbursement
• Contract stability funded through 2030