Cyber Fusion Analyst (TS/SCI)

Zachary Piper Solutions is seeking a Sr. Cyber Fusion Analyst to support the Department of Defense’s Cyber Defense Command at Ft. Meade, MD. The analyst will produce and disseminate all-source integrated intelligence analysis to support DODIN and defensive cyberspace operations.

Clearance: TS/SCI required
Location: Ft. Meade, MD (100% onsite)

Responsibilities

• Utilize network monitoring and detection tools, including NetFlow, IDS, protocol logs, and PCAP data, to identify malicious cyber activity.
• Support the development of Cyber Fusion SOPs, frameworks, and methodologies aligned with industry and Department of War standards.
• Identify enterprise threats and recommend mitigation strategies to strengthen security and reduce risk.
• Analyze threat intelligence, OSINT, and vulnerability data to prioritize response and remediation efforts.
• Assess and document adversary tactics, techniques, and procedures (TTPs) and their impact on the operational environment.
• Detect and investigate adversary activity, anomalies, and suspicious events across logs, SIEMs, and security monitoring platforms.
• Conduct compromise assessments and produce analytical reports and attack lifecycle visualizations.
• Provide risk assessments and security recommendations based on threat, intelligence, and vulnerability analysis.
• Recommend enhancements to cyber defense measures protecting the Department of War Information Network (DOWIN).
• Track and analyze cybersecurity metrics and trends to deliver actionable situational awareness.
• Provide intelligence analysis and assessments to support joint military cyber planning efforts, including operational plans, Annex B development, and planning groups.

Requirements

• Bachelor’s degree in a related discipline and 8+ years of experience with cyber threat intelligence analysis.
• Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies.
• Experience with datasets, tools, and protocols that support analysis (e.g., passive DNS, VirusTotal, Recorded Future, TCP/IP, OSI, WHOIS, enumeration, threat indicators, malware analysis results, Wireshark, Splunk, ArcSight).
• Experience with various open-source and commercial vendor portals, services, and platforms that provide insight into identifying and/or combating threats or vulnerabilities to the enterprise.
• Proficiency working with various types of network data (e.g., netflow, PCAP, custom application logs).

Pay

Total compensation based on experience level: $130,000–$155,000+

Benefits

• Full benefits package including PTO/holidays, Cigna medical, dental, and vision insurance.
• 401k with ADP.
• Certification reimbursement.
• Contract stability funded through 2030.